diff options
author | Christoph M. Becker <cmbecker69@gmx.de> | 2021-02-19 13:14:26 +0100 |
---|---|---|
committer | Christoph M. Becker <cmbecker69@gmx.de> | 2021-02-22 12:32:56 +0100 |
commit | d7c98ca1ac10ee0461f332f21e548649dc0e51c9 (patch) | |
tree | 709e07bbba5b49ab37e6717276f7310ad79b8e52 /ext/zip/php_zip.c | |
parent | 6dd85f83f78fbafc4a90b264e577a31b59323314 (diff) | |
download | php-git-d7c98ca1ac10ee0461f332f21e548649dc0e51c9.tar.gz |
Fix #80774: session_name() problem with backslash
Since we do no longer URL decode cookie names[1], we must not URL
encode the session name. We need to prevent broken Set-Cookie headers,
by rejecting names which contain invalid characters.
[1] <http://git.php.net/?p=php-src.git;a=commit;h=6559fe912661ca5ce5f0eeeb591d928451428ed0>
Closes GH-6711.
Diffstat (limited to 'ext/zip/php_zip.c')
0 files changed, 0 insertions, 0 deletions