mirror/php-flarum
1
0
Fork 0
mirror of https://github.com/flarum/core.git synced 2025-09-01 12:12:45 +02:00
Code Issues Releases Wiki Activity

fix: filter values are not validated (#3795)

Browse Source
This commit is contained in:
Sami Mazouz
2023-05-07 18:37:53 +01:00
committed by GitHub
parent c766881e1f
commit 9363682e1c
27 changed files with 214 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
extensions/subscriptions/src/Query/SubscriptionFilterGambit.php
View File

@@ -11,6 +11,7 @@ namespace Flarum\Subscriptions\Query;
use Flarum\Filter\FilterInterface;
use Flarum\Filter\FilterState;
use Flarum\Filter\ValidateFilterTrait;
use Flarum\Search\AbstractRegexGambit;
use Flarum\Search\SearchState;
use Flarum\User\User;
@@ -18,6 +19,8 @@ use Illuminate\Database\Query\Builder;
class SubscriptionFilterGambit extends AbstractRegexGambit implements FilterInterface
{
use ValidateFilterTrait;
protected function getGambitPattern()
{
return 'is:(follow|ignor)(?:ing|ed)';
@@ -33,8 +36,10 @@ class SubscriptionFilterGambit extends AbstractRegexGambit implements FilterInte
return 'subscription';
}
public function filter(FilterState $filterState, string $filterValue, bool $negate)
public function filter(FilterState $filterState, $filterValue, bool $negate)
{
$filterValue = $this->asString($filterValue);
preg_match('/^'.$this->getGambitPattern().'$/i', 'is:'.$filterValue, $matches);
$this->constrain($filterState->getQuery(), $filterState->getActor(), $matches[1], $negate);