Tabs stop working in subpages

Kirby 3
1

After updating Kirby to the latest version tabs inside subpages stops works

image
image1832×822 85.4 KB

image
image1240×420 82.2 KB

when I open the page directly via URL tabs is open but for some reason in Kirby panel tabs are not open.
for pages, first-level tabs work well.

can you help me with this issue?

2

for now, find only one solution change it via htaccess

RewriteEngine on
RewriteCond %{THE_REQUEST} %2b
RewriteRule ^(.+)$ %{REQUEST_URI} [R=301,L,QSA,NE]

3

Hi, I got the same error. Is this a bug in Kirby? The above solution feels more like an emergency solution.

The tabs works locally but not on staging for me.

Environment local:
Kirby: v3.6.5 (same in v.3.6.2)
PHP: v7.4.16
Server: Nginx

Environment staging:
Kirby: v3.6.5 (same in v.3.6.2)
PHP: v8.0.17
Server: LiteSpeed

4

I think this is a bug in Kirby.

I was trying to recreate the problem with tabs in Starterkit. The only thing I changed was that I added tabs in the note blueprint. And then comes the error.

Test environment:
Kirby: v3.6.5
PHP: v8.0.17
Server: LiteSpeed

Skärmavbild 2022-04-20 kl. 16.18.52
Skärmavbild 2022-04-20 kl. 16.18.521920×1104 77.6 KB

I dont think this topic has been solved.

5

I just recreated your setup in the starter kit and on an apache server everything is working just fine.
So I suspect it must have something to do with the LiteSpeed server

6

Yes, and everything is working just fine on nginx as well.
So it seem to be related to LiteSpeed.

7

Did you change htaccess as I wrote?

8

Yes I did and it works. The client can continue working because of your snippet, thanks! But it does not feel like a solution over time to have to edit .htaccess because you using LiteSpeed as your server.

9

Sure, will wait for official fix

10

One day, even this solution stops working. So I investigate other variants and found this one

if(false!==stripos($_SERVER['REQUEST_URI'],"%2B")){
    http_response_code(307);
    header("Location: ".strtr($_SERVER['REQUEST_URI'],array('%2b'=>'+','%2B'=>'+')));
    die();
}

Only one thing I don’t know is it solution is safe for XSS