TYPO3 v15 dev-main snapshot ()

2026-08-10 22:31:24 +02:00
commit aad9daaefd
1506 changed files with 94005 additions and 0 deletions
@@ -0,0 +1,92 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * This file is part of the TYPO3 CMS project.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+/*
+ * Inspired by and partially taken from the Neos.Form package (www.neos.io)
+ */
+
+namespace TYPO3\CMS\Form\ViewHelpers;
+
+use TYPO3\CMS\Core\Crypto\HashAlgo;
+use TYPO3\CMS\Core\Utility\GeneralUtility;
+use TYPO3\CMS\Fluid\ViewHelpers\FormViewHelper as FluidFormViewHelper;
+use TYPO3\CMS\Form\Domain\Runtime\FormRuntime;
+use TYPO3\CMS\Form\Security\HashScope;
+use TYPO3Fluid\Fluid\Core\ViewHelper\TagBuilder;
+
+/**
+ * Custom form ViewHelper that renders the form state instead of referrer fields
+ *
+ * Scope: frontend
+ *
+ * @see https://docs.typo3.org/permalink/t3viewhelper:typo3-form-form
+ */
+final class FormViewHelper extends FluidFormViewHelper
+{
+    /**
+     * Renders hidden form fields for referrer information about
+     * the current request.
+     *
+     * @return string Hidden fields with referrer information
+     */
+    protected function renderHiddenReferrerFields(): string
+    {
+        $formRuntime = $this->getFormRuntime();
+        $prefix = $this->prefixFieldName($this->getFormObjectName());
+
+        $markup = $this->createHiddenInputElement(
+            $prefix . '[__state]',
+            $this->hashService->appendHmac(
+                base64_encode(serialize($formRuntime->getFormState())),
+                HashScope::FormState->prefix(),
+                HashAlgo::SHA3_256
+            )
+        );
+
+        // ONLY assign `__session` if form is performing (uncached)
+        if ($formRuntime->canProcessFormSubmission() && $formRuntime->getFormSession() !== null) {
+            $markup .= $this->createHiddenInputElement(
+                $prefix . '[__session]',
+                $formRuntime->getFormSession()->getAuthenticatedIdentifier()
+            );
+        }
+        return $markup;
+    }
+
+    private function createHiddenInputElement(string $name, string $value): string
+    {
+        $tagBuilder = GeneralUtility::makeInstance(TagBuilder::class, 'input');
+        $tagBuilder->addAttribute('type', 'hidden');
+        $tagBuilder->addAttribute('name', $name);
+        $tagBuilder->addAttribute('value', $value);
+        return $tagBuilder->render();
+    }
+
+    /**
+     * We do NOT return NULL as in this case, the Form ViewHelpers do not enter $objectAccessorMode.
+     * However, we return the form identifier.
+     */
+    protected function getFormObjectName(): string
+    {
+        return $this->getFormRuntime()->getFormDefinition()->getIdentifier();
+    }
+
+    private function getFormRuntime(): FormRuntime
+    {
+        return $this->arguments['object'];
+    }
+}