Kiseki
/
laravel-zxcvbn
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Untrust user input for ZxcvbnDictionary

This commit is contained in:
rjindael 2023-06-10 23:49:32 -07:00
parent e03d3915c5
commit 40e3071d95
No known key found for this signature in database
GPG Key ID: D069369C906CCF31
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/Rules/ZxcvbnDictionary.php
View File

@ -16,7 +16,7 @@ class ZxcvbnDictionary implements Rule
*/ */
public function __construct($input1 = null, $input2 = null) public function __construct($input1 = null, $input2 = null)
{ {
$this->input = array_filter([$input1, $input2]); $this->input = array_filter([base64_decode($input1), base64_decode($input2)]);
} }
public static function handle(): string public static function handle(): string