Skip to content

Conversation

@kenjis
Copy link
Member

@kenjis kenjis commented Jan 8, 2022

This PR goes into hotfix-4.1.7 .

Description
Supersedes #5540
Follow-up #5005

  • replace FILTER_SANITIZE_STRING with FILTER_SANITIZE_FULL_SPECIAL_CHARS in get_cookie()
  • add warning on get_cookie() xxsClean

Checklist:

  • Securely signed commits
  • [] Component(s) with PHPDoc blocks, only if necessary or adds value
  • Unit testing, with >80% coverage
  • User guide updated
  • Conforms to style guide

TimZ99 and others added 3 commits January 8, 2022 10:03
Replaced with FILTER_SANITIZE_FULL_SPECIAL_CHARS. Equivalent to calling htmlspecialchars() with ENT_QUOTES set.
Replaced with FILTER_SANITIZE_FULL_SPECIAL_CHARS. Equivalent to calling htmlspecialchars() with ENT_QUOTES set.
@kenjis kenjis added bug Verified issues on the current code behavior or pull requests that will fix them hotfix breaking change Pull requests that may break existing functionalities labels Jan 8, 2022
@kenjis kenjis merged commit 297c72d into codeigniter4:hotfix-4.1.7 Jan 8, 2022
@kenjis kenjis deleted the replace_deprecated_filter branch January 8, 2022 02:40
@kenjis kenjis mentioned this pull request Jan 8, 2022
8 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking change Pull requests that may break existing functionalities bug Verified issues on the current code behavior or pull requests that will fix them hotfix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants