When user is adding input like,

  • node:1, user:1,
  • node:1, , ,

explode() function output is,

  • Array ( [0] => node:1 [1] => user:1 [2] => )
  • Array ( [0] => node:1 [1] => [2] => [3] => )

It processes the unwanted values and passes into the Cache invalidator function.

CommentFileSizeAuthor
#2 bad-user-input-3131508-02.patch668 bytesdishabhadra

Issue fork ctc-3131508

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

dishabhadra created an issue. See original summary.

dishabhadra’s picture

dishabhadra commented
Assigned: dishabhadra » Unassigned
Status: Active » Needs review
StatusFileSize
new bad-user-input-3131508-02.patch668 bytes

Added the patch for the same. Please review.

gslente made their first commit to this issue’s fork.

gslente’s picture

gslente commented
Assigned: Unassigned » gslente
Status: Needs review » Patch (to be ported)

Patch at #2 has been reviewed and tested and is working fine.
Patch will be ported to merge request.

gslente opened merge request !5

gslente closed merge request !5

gslente changed the visibility of the branch 3131508-explode-is-processing to hidden.

gslente opened merge request !6

gslente’s picture

gslente commented
Assigned: gslente » Unassigned
Status: Patch (to be ported) » Needs review

Added merge request based on patch from #2
https://git.drupalcode.org/project/ctc/-/merge_requests/6/diffs

Kindly review. Thank you.

yuvania’s picture

yuvania
she/her
Primary language Spanish
commented
Status: Needs review » Reviewed & tested by the community

Thanks for the merge request. I tested it and it works perfectly. Ready to move forward!