MDL-58220 oauth2: tighten the param types

These come from external sources - but still should not contain crazy stuff.
2025-04-21 08:22:07 +02:00 · 2017-03-28 11:36:33 +08:00 · 2017-03-28 11:36:33 +08:00 · 68ecf7635b
commit 68ecf7635b
parent 440df5fb7f
1 changed files with 1 additions and 1 deletions
--- a/lib/classes/oauth2/endpoint.php
+++ b/lib/classes/oauth2/endpoint.php
@ -49,7 +49,7 @@ class endpoint extends persistent {
                'type' => PARAM_INT
            ),
            'name' => array(
-                'type' => PARAM_RAW,
+                'type' => PARAM_ALPHANUMEXT,
            ),
            'url' => array(
                'type' => PARAM_URL,