Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Closes request #35843: Login page crashes when a null byte is set in the return_to parameter

Download Browse

To reproduce: `GET /account/login.php?return_to=%00` Change-Id: I9c3cb5c630880a6ffcfc155b6e0a34cc49d1c7fa

+7 −7
Thomas Gerbet (tgerbet) 2024-01-11 11:27
Thomas Gerbet (tgerbet) 2024-01-11 11:29
f620f6f7b0e111b899a2dc095667b25b30da80e4
ceae2fa3cb9478440dd4f326d7d38806ad918e96
git #tuleap/stable/f620f6f7b0e111b899a2dc095667b25b30da80e4

Modified Files

Side by side diff
Inline diff
Name
M src/common/User/LoginPresenterBuilder.php +4 −4 Go to diff View file
M src/www/account/login.php +3 −3 Go to diff View file