diff options
| author | Stanislav Malyshev <stas@php.net> | 2007-06-15 22:40:00 +0000 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2007-06-15 22:40:00 +0000 |
| commit | 70a8f9313bd2e6102ff12a1a5b5b9c096f9ce30f (patch) | |
| tree | fba8f341ca24e82c31e13f1902b428ddc9d5ce41 /ext/session | |
| parent | 93cf41436b1d04beb4a8b17d28052fb0077c40df (diff) | |
| download | php-git-70a8f9313bd2e6102ff12a1a5b5b9c096f9ce30f.tar.gz | |
Disallow characters that Cookie RFC does not allow in unquoted cookies
Diffstat (limited to 'ext/session')
| -rw-r--r-- | ext/session/session.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/session/session.c b/ext/session/session.c index b249f3a758..3d87a423c5 100644 --- a/ext/session/session.c +++ b/ext/session/session.c @@ -807,7 +807,7 @@ static void php_session_initialize(TSRMLS_D) int vallen; /* check session name for invalid characters */ - if (PS(id) && strpbrk(PS(id), "\r\n\t <>'\"\\")) { + if (PS(id) && strpbrk(PS(id), "\r\n\t <>'\"\\()@,;:[]?={}&%")) { efree(PS(id)); PS(id) = NULL; } |