Changeset 6890 for branches/2.1/include/ws_core.inc.php

Timestamp:

Sep 13, 2010, 8:40:34 PM (14 years ago)

Author:

plg

Message:

bug 1848 fixed: do not print methodName in header to avoid CRLF attack.

File:

• branches/2.1/include/ws_core.inc.php (modified) (1 diff)

branches/2.1/include/ws_core.inc.php

@@ -478 +478 @@
     if ( $method==null )
     {
-      return new PwgError(WS_ERR_INVALID_METHOD, 'Method name "'.$methodName.'" is not valid');
+      return new PwgError(WS_ERR_INVALID_METHOD, 'Method name is not valid');
     }