fix: stop malformed captcha requests from poisoning the page cache
This commit is contained in:
1 parent
b41aeb7a25
commit
4095c4a068
1 file changed
+6
@@ -22,3 +22,9 @@ plugin.tx_bwcaptcha.settings {
|
||||
width = 220
|
||||
height = 60
|
||||
}
|
||||
|
||||
# Requests with a malformed type (e.g. ?type=03413) bypass the bw_captcha middleware's
|
||||
# strict string check and get rendered as this empty PAGE. If it were cacheable, genuine
|
||||
# ?type=3413 requests would hit that cache entry, TypoScript would never be parsed and
|
||||
# the middleware would crash on empty settings.
|
||||
captcha.config.no_cache = 1
|
||||
Reference in new issue
Block a user