hotline #86891: XSS vulnerabilities in search queries (!3104) · Merge requests · afi / opacce · GitLab

Snippets Groups Projects

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Merged hotline #86891: XSS vulnerabilities in search queries

hotline#86891_vulnerabilites_bokeh into hotline

1 unresolved thread

Merged Laurent requested to merge hotline#86891_vulnerabilites_bokeh into hotline 6 years ago

1 unresolved thread

Activity

Ghislain Loas @gloas started a thread on the diff 6 years ago

Last updated 6 years ago by Laurent

library/Class/CriteresRecherche/Validator.php

   public function isValid($key, $params) {
     return in_array($params[$key], $this->_possibles);
     return is_numeric($params[$key]) && in_array($params[$key], $this->_possibles);

Laurent merged 6 years ago

merged
Laurent mentioned in commit c3c63298 6 years ago

mentioned in commit c3c63298

Please register or sign in to reply