Untrust user input for ZxcvbnDictionary

2023-06-10 23:49:32 -07:00 · 2023-06-10 23:49:32 -07:00 · 40e3071d95
parent e03d3915c5
commit 40e3071d95
1 changed files with 1 additions and 1 deletions
--- a/src/Rules/ZxcvbnDictionary.php
+++ b/src/Rules/ZxcvbnDictionary.php
@ -16,7 +16,7 @@ class ZxcvbnDictionary implements Rule
     */
    public function __construct($input1 = null, $input2 = null)
    {
-        $this->input = array_filter([$input1, $input2]);
+        $this->input = array_filter([base64_decode($input1), base64_decode($input2)]);
    }

    public static function handle(): string