Skip to content

Ruby: add rack env['QUERY_STRING'] as a remote flow input #13585

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Jul 18, 2023

Conversation

alexrford
Copy link
Contributor

@alexrford alexrford commented Jun 27, 2023

env['QUERY_STRING'] gives direct access to the request query string, which can be user controlled.

This will conflict trivially with #13566 due to test changes.

@alexrford alexrford added no-change-note-required This PR does not need a change note Ruby labels Jun 27, 2023
@alexrford alexrford force-pushed the rb/rack-env-query-string branch from 9caf060 to 9b2cd76 Compare July 5, 2023 14:17
@alexrford alexrford force-pushed the rb/rack-env-query-string branch from 42406a5 to 08784d2 Compare July 5, 2023 14:49
@alexrford alexrford marked this pull request as ready for review July 5, 2023 14:50
@alexrford alexrford requested a review from a team as a code owner July 5, 2023 14:50
@calumgrant calumgrant requested a review from asgerf July 10, 2023 08:24
asgerf
asgerf previously approved these changes Jul 14, 2023
Copy link
Contributor

@asgerf asgerf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM with an optional suggestion

Co-authored-by: Asger F <asgerf@github.com>
@alexrford alexrford removed the no-change-note-required This PR does not need a change note label Jul 17, 2023
@alexrford alexrford merged commit e803e98 into github:main Jul 18, 2023
@alexrford alexrford deleted the rb/rack-env-query-string branch July 18, 2023 11:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants