Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Raise error if there is a token in the body of a GET request #127

Merged
merged 1 commit into from
Jan 8, 2021

Conversation

akrabat
Copy link
Member

@akrabat akrabat commented Jan 4, 2021

Methods such as GET should not be used for state change operations (see RFC2616). If the body of a GET request has the token in it, then treat that as an error.

Thanks to @xhlika for the report.

@akrabat akrabat added this to the 1.1.0 milestone Jan 4, 2021
@akrabat akrabat requested a review from l0gicgate January 4, 2021 13:58
@akrabat akrabat force-pushed the no-token-in-get-body branch 2 times, most recently from ec16016 to d1a0435 Compare January 5, 2021 10:56
src/Guard.php Outdated Show resolved Hide resolved
tests/GuardTest.php Show resolved Hide resolved
Methods such as GET should not be used for state change operations
(RFC2616). If the body of a GET request has the token in it, then treat
that as an error.

Thanks to Xhelal Likaj (https://github.com/xhlika) for the report.
@akrabat akrabat force-pushed the no-token-in-get-body branch from 35a9ed6 to 99234ed Compare January 7, 2021 10:02
@akrabat
Copy link
Member Author

akrabat commented Jan 7, 2021

Rebased and removed additional blank line.

@l0gicgate l0gicgate merged commit fd03c9e into slimphp:master Jan 8, 2021
@akrabat akrabat deleted the no-token-in-get-body branch February 4, 2021 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants