-
Notifications
You must be signed in to change notification settings - Fork 1.9k
feat: add filter to check invalid chars in user input #5227
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
837f37b
to
44db72b
Compare
Great security addition! Made a few notes. I wonder if we should ship this on by default? Since it would be a change to app/ we can afford to do it without affecting existing projects. Have you benchmarked this or checked Debug Toolbar timelines to see impact? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for those changes, looks great!
The following test failed. It depends global state. 1) CodeIgniter\HTTP\ResponseTest::testSetLink Failed asserting that two strings are identical.
0633964
to
78c2150
Compare
Users could override the property.
78c2150
to
fb9f6ec
Compare
@MGatner I rebased this PR and added 3 commits.
I saw Debug Toolbar timelines, but small input does not impact. |
Co-authored-by: John Paul E. Balandan, CPA <[email protected]>
Co-authored-by: John Paul E. Balandan, CPA <[email protected]>
Co-authored-by: John Paul E. Balandan, CPA <[email protected]>
Co-authored-by: John Paul E. Balandan, CPA <[email protected]>
Co-authored-by: John Paul E. Balandan, CPA <[email protected]>
Co-authored-by: John Paul E. Balandan, CPA <[email protected]>
💪😊👍 |
Description
Checklist: