Skip to content
This repository has been archived by the owner on Jul 24, 2023. It is now read-only.

Fix encoding errors in some POST forms + fix example server #83

Merged
merged 3 commits into from
Dec 21, 2012
Merged

Fix encoding errors in some POST forms + fix example server #83

merged 3 commits into from
Dec 21, 2012

Conversation

olavmrk
Copy link
Contributor

@olavmrk olavmrk commented Oct 19, 2012

This patchset contains three fixes:

  • Revert an old commit that breaks parameters containing anything that looks like URL encoded data.
  • Properly escape generated HTML form with htmlspecialchars().
  • Fix some object reference warnings/errors in the example server.

…em if needed)."

Since the message values are not URL encoded, calling urldecode() on
them does not make sense. Instead, it breaks any OpenID parameter
containing anything that looks like URL encoding.

This reverts commit 8d53dfe.
Since this data is inserted as strings in HTML documents, we should
call htmlspecialchars() to protect against any values containing
special characters, e.g. '"' or '&'.
Since all objects are passed by reference in PHP 5, assigning them by
reference does not make sense, and in some cases causes warnings.
@marcoceppi
Copy link
Member

+1 from me and merge.

marcoceppi added a commit that referenced this pull request Dec 21, 2012
Fix encoding errors in some POST forms + fix example server
@marcoceppi marcoceppi merged commit 487d185 into openid:master Dec 21, 2012
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants