Christoph M. Becker 4a89e726bd Alternative fix for bug 77423 ...

That bug report originally was about `parse_url()` misbehaving, but the
security aspect was actually only regarding `FILTER_VALIDATE_URL`.
Since the changes to `parse_url_ex()` apparently affect userland code
which is relying on the sloppy URL parsing[1], this alternative
restores the old parsing behavior, but ensures that the userinfo is
checked for correctness for `FILTER_VALIDATE_URL`.

[1] <https://github.com/php/php-src/commit/5174de7cd33c3d4fa591c9c93859ff9989b07e8c#commitcomment-45967652>

2021-01-26 22:54:58 -08:00

..

tests

Alternative fix for bug 77423

2021-01-26 22:54:58 -08:00

callback_filter.c

Remove unused Git attributes ident

2018-07-25 00:53:25 +02:00

config.m4

Remove unused Git attributes ident

2018-07-25 00:53:25 +02:00

config.w32

Remove unused Git attributes ident

2018-07-25 00:53:25 +02:00

CREDITS

Shoehorn myself into the credits.

2006-10-03 22:18:08 +00:00

filter_private.h

Remove unused Git attributes ident

2018-07-25 00:53:25 +02:00

filter.c

The session_array global is not used at all, so comment it out for now

2018-07-09 04:21:46 +02:00

logical_filters.c

Alternative fix for bug 77423

2021-01-26 22:54:58 -08:00

php_filter.h

Remove unused Git attributes ident

2018-07-25 00:53:25 +02:00

sanitizing_filters.c

Fix #73527: Invalid memory access in php_filter_strip

2020-06-04 13:37:11 +02:00