Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prevent object injection through unserialize #69

Merged
merged 3 commits into from
May 20, 2019
Merged

Prevent object injection through unserialize #69

merged 3 commits into from
May 20, 2019

Commits on May 20, 2019

  1. Prevent object injection through unserialize 

    See https://www.owasp.org/index.php/PHP_Object_Injection for example
    @StijnVrolijk
    StijnVrolijk committed May 20, 2019
    Configuration menu
    Copy the full SHA
    d1a3c3a View commit details
    Browse the repository at this point in the history

  2. Check if the value itself is false 

    If it's the case we still want to save it and send it back
    @StijnVrolijk
    StijnVrolijk committed May 20, 2019
    Configuration menu
    Copy the full SHA
    01b70d9 View commit details
    Browse the repository at this point in the history

  3. Make sure the set cookie doesn't contain null 

    If it does we don't want to throw an exception but just return the null
value
    @StijnVrolijk
    StijnVrolijk committed May 20, 2019
    Configuration menu
    Copy the full SHA
    86aba87 View commit details
    Browse the repository at this point in the history