search

bcosca / fatfree

A powerful yet easy-to-use PHP micro-framework designed to help you build dynamic and robust Web applications - fast!
2.66k stars 446 forks source link

Invalid characters on url throw a 500 #1287

Open kurbanatabinen opened 1 month ago

kurbanatabinen commented 1 month ago

Hello :)

In some case, if there is a %0A in url, fat free throw a 500.

Exemple :

GET /api/users%0A

Return : ERROR 500: Invalid class \apis\users

The trace :

[vendor/bcosca/fatfree-core/base.php:1401] Base->call() [vendor/bcosca/fatfree-core/base.php:2388] Base->error() [vendor/bcosca/fatfree-core/base.php:1922] user_error() [vendor/bcosca/fatfree-core/base.php:1966] Base->grab() [vendor/bcosca/fatfree-core/base.php:1793] Base->call() Base->run()