Skip to content

Commit

Permalink
don't unserialize because we can't trust user input, force `encrypt…
Browse files Browse the repository at this point in the history
…(..., serialize: false)` to be used instead
  • Loading branch information
david-d-h committed Jun 15, 2024
1 parent ea67f6d commit 1031a79
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion routes/permanent-cache.php
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@

Route::get('/permanent-cache/{class}/update', function (Request $request, string $class) {
/** @var class-string<CachesValue> $class */
$class = decrypt($class);
$class = decrypt($class, false);

$parameters = ($parameters = $request->query('parameters'))
? Arr::wrap(decrypt($parameters))
Expand Down

0 comments on commit 1031a79

Please sign in to comment.