Changeset 6892

Timestamp:

09/13/10 20:41:25 (3 years ago)

Author:

plg

Message:

merge r6890 from branch 2.1 to trunk

bug 1848 fixed: do not print methodName in header to avoid CRLF attack.

Files:

• trunk/include/ws_core.inc.php (modified) (1 diff)

trunk/include/ws_core.inc.php

@@ -478 +478 @@
     if ( $method==null )
     {
-      return new PwgError(WS_ERR_INVALID_METHOD, 'Method name "'.$methodName.'" is not valid');
+      return new PwgError(WS_ERR_INVALID_METHOD, 'Method name is not valid');
     }