fix: stop malformed captcha requests from poisoning the page cache

This commit is contained in:
fromme committed 2026-09-30 15:24:50 +02:00
1 parent b41aeb7a25
commit 4095c4a068
1 file changed
+6
@@ -22,3 +22,9 @@ plugin.tx_bwcaptcha.settings {
width = 220
height = 60
}
# Requests with a malformed type (e.g. ?type=03413) bypass the bw_captcha middleware's
# strict string check and get rendered as this empty PAGE. If it were cacheable, genuine
# ?type=3413 requests would hit that cache entry, TypoScript would never be parsed and
# the middleware would crash on empty settings.
captcha.config.no_cache = 1