Skip to content

Commit

Permalink
Fixed infinite loop (DoS) remotely triggerable state change issue.
Browse files Browse the repository at this point in the history
  • Loading branch information
cubiclesoft committed Nov 4, 2017
1 parent 4baa62c commit 52a8e9d
Showing 1 changed file with 25 additions and 0 deletions.
25 changes: 25 additions & 0 deletions support/tag_filter.php
Original file line number Diff line number Diff line change
Expand Up @@ -302,6 +302,13 @@ public function Process($content)
}
}
}

if ($state === "key")
{
$cx = $cy;

$state = "exit";
}
}
else if ($state === "equals")
{
Expand Down Expand Up @@ -351,6 +358,15 @@ public function Process($content)
}
}
}

if ($state === "equals")
{
$cx = $cy;

$attrs[$keyname] = true;

$state = "exit";
}
}
else if ($state === "value")
{
Expand Down Expand Up @@ -400,6 +416,15 @@ public function Process($content)
}
}

if ($state === "value")
{
$cx = $cy;

$attrs[$keyname] = true;

$state = "exit";
}

if ($state === "key")
{
$value = html_entity_decode($value, ENT_QUOTES | ENT_HTML5, $this->options["charset"]);
Expand Down

0 comments on commit 52a8e9d

Please sign in to comment.