mirror of
https://github.com/bdnugget/php-src.git
synced 2026-11-07 09:17:29 +00:00
Stanislav Malyshev
d99c019535
* PHP-7.3: Update UPGRADING Update NEWS & UPGRADING Do not decode cookie names anymore Fix bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV)
23 lines
355 B
PHP
23 lines
355 B
PHP
--TEST--
|
|
Cookies Security Bug
|
|
--INI--
|
|
max_input_vars=1000
|
|
filter.default=unsafe_raw
|
|
--COOKIE--
|
|
__%48ost-evil=evil; __Host-evil=good; %66oo=baz;foo=bar
|
|
--FILE--
|
|
<?php
|
|
var_dump($_COOKIE);
|
|
?>
|
|
--EXPECT--
|
|
array(4) {
|
|
["__%48ost-evil"]=>
|
|
string(4) "evil"
|
|
["__Host-evil"]=>
|
|
string(4) "good"
|
|
["%66oo"]=>
|
|
string(3) "baz"
|
|
["foo"]=>
|
|
string(3) "bar"
|
|
}
|