diff options
| author | Christoph M. Becker <cmbecker69@gmx.de> | 2021-01-19 11:23:25 +0100 |
|---|---|---|
| committer | Gabriel Caruso <carusogabriel34@gmail.com> | 2021-02-02 07:45:26 -0300 |
| commit | 605d9f55ad0da0608364f7a7629f5df921dfe2ec (patch) | |
| tree | 405dba9b05ebb76c44c0bbb307636d52d39a66f5 /ext/json/php_json.h | |
| parent | 5e21867c552a861f3b59593fdb12268f983507de (diff) | |
| download | php-git-605d9f55ad0da0608364f7a7629f5df921dfe2ec.tar.gz | |
Alternative fix for bug 77423
That bug report originally was about `parse_url()` misbehaving, but the
security aspect was actually only regarding `FILTER_VALIDATE_URL`.
Since the changes to `parse_url_ex()` apparently affect userland code
which is relying on the sloppy URL parsing[1], this alternative
restores the old parsing behavior, but ensures that the userinfo is
checked for correctness for `FILTER_VALIDATE_URL`.
[1] <https://github.com/php/php-src/commit/5174de7cd33c3d4fa591c9c93859ff9989b07e8c#commitcomment-45967652>
Diffstat (limited to 'ext/json/php_json.h')
0 files changed, 0 insertions, 0 deletions