[6.x] Fixed dns_get_record loose check of A records for active_url rule #37675
+1
−1
Conversation
Fixed dns_get_record loose check of A records for active_url rule. Tested on Laravel v8.46.0, PHP v8.0.7. This patch is related to security issue I reported at https://huntr.dev/bounties/2-laravel/framework/.
|
No tests? |
I have manually tested it. If you are a maintainer, can you please see the report I submitted and validate it? It will help me earn a bounty from huntr.dev. Thank you. |
|
Can you explain why appending a |
|
|
Thanks @taylorotwell, can you please also validate the patch on huntr.dev (https://huntr.dev/bounties/2-laravel/framework/). I have another security report https://huntr.dev/bounties/3-laravel/framework/ but I am unsure of the fix for this one. If anyone wants to fix it, there is a bounty reward of 75$ by huntr.dev on this one. |
chu121su12
added a commit
to chu121su12/framework
that referenced
this pull request
Jun 14, 2021
Fixed dns_get_record loose check of A records for active_url rule. Tested on Laravel v8.46.0, PHP v8.0.7. This patch is related to security issue I reported at https://huntr.dev/bounties/2-laravel/framework/.
GrahamCampbell
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Fixed dns_get_record loose check of A records for active_url rule.
Tested on Laravel v8.46.0, PHP v8.0.7.
This patch is related to security issue I reported at https://huntr.dev/bounties/2-laravel/framework/.