" for each scalar property value * within the form definition as a sibling of the property key. * "_orig_" is an array which contains the property value * and a hmac hash for the property value. * "_orig_" will be used to validate the form definition on saving. * @see \TYPO3\CMS\Form\Domain\Configuration\FormDefinitionValidationService::validateFormDefinitionProperties() */ public function addHmacData(array $formDefinition): array { // Extend the hmac hashing key with a "per form editor session" unique key. $sessionToken = $this->generateSessionToken(); $this->persistSessionToken($sessionToken); $converterDto = GeneralUtility::makeInstance(ConverterDto::class, $formDefinition); GeneralUtility::makeInstance(ArrayProcessor::class, $formDefinition)->forEach( GeneralUtility::makeInstance( ArrayProcessing::class, 'addHmacData', '(^identifier$|renderables\.([\d]+)\.identifier$)', GeneralUtility::makeInstance( AddHmacDataConverter::class, $converterDto, $sessionToken ) ) ); return $converterDto->getFormDefinition(); } /** * Remove the "_orig_" values from the form definition. */ public function removeHmacData(array $formDefinition): array { $converterDto = GeneralUtility::makeInstance(ConverterDto::class, $formDefinition); GeneralUtility::makeInstance(ArrayProcessor::class, $formDefinition)->forEach( GeneralUtility::makeInstance( ArrayProcessing::class, 'removeHmacData', '(_orig_.*|.*\._orig_.*)\.hmac', GeneralUtility::makeInstance( RemoveHmacDataConverter::class, $converterDto ) ) ); return $converterDto->getFormDefinition(); } /** * Migrate various finisher options */ public function migrateFinisherConfiguration(array $formDefinition): array { $converterDto = GeneralUtility::makeInstance(ConverterDto::class, $formDefinition); GeneralUtility::makeInstance(ArrayProcessor::class, $formDefinition)->forEach( GeneralUtility::makeInstance( ArrayProcessing::class, 'migrateFinisherLanguageSettings', '^finishers\.([\d]+)\.options.translation.language$', GeneralUtility::makeInstance( FinisherTranslationLanguageConverter::class, $converterDto ) ) ); return $converterDto->getFormDefinition(); } protected function persistSessionToken(string $sessionToken) { $this->getBackendUser()->setAndSaveSessionData('extFormProtectionSessionToken', $sessionToken); } /** * Generates the random token which is used in the hash for the form tokens. * * @return string */ protected function generateSessionToken() { return GeneralUtility::makeInstance(Random::class)->generateRandomHexString(64); } protected function getBackendUser(): BackendUserAuthentication { return $GLOBALS['BE_USER']; } }