1
0
mirror of https://github.com/php/php-src.git synced 2026-03-24 08:12:21 +01:00
Files
Niels Dossche 9382673148 Fix GHSA-3qgc-jrrr-25jv
The original code is error-prone due to the "best fit mapping" that
happens with the argument parsing but not with the query string.
When we get a non-ASCII character, try to remap it and see if it becomes
a hyphen.

An alternative approach is to create a custom main `wmain` receiving
wide-character variations that does the ANSI transformation with the
best-fit mapping, but that's more error-prone and could cause unexpected
breakage.

Another alternative was just don't doing this check altogether and
always check for `cgi || fastcgi` instead, but that breaks real-world
use-cases.
2024-06-05 00:29:19 -05:00
..
2020-09-18 14:28:32 +02:00
2020-02-03 22:52:20 +01:00
2020-09-18 14:28:32 +02:00
2020-09-18 14:28:32 +02:00
2020-02-03 22:52:20 +01:00
2019-11-07 21:31:47 +01:00
2020-02-03 22:52:20 +01:00
MFH
2009-04-24 19:48:41 +00:00
2020-02-03 22:52:20 +01:00
2019-11-07 21:31:47 +01:00
2020-06-26 14:17:56 +02:00
2020-02-03 22:52:20 +01:00