OSDN Git Service

Use preg_quote on regex as for security reasons
authorJefersson Nathan <admin@phpse.net>
Mon, 19 Dec 2016 12:05:19 +0000 (09:05 -0300)
committerJefersson Nathan <admin@phpse.net>
Mon, 19 Dec 2016 12:05:19 +0000 (09:05 -0300)
src/Router.php

index 8a4ddf0..11d44bf 100755 (executable)
@@ -113,7 +113,7 @@ class Router
             }
 
             $route = rtrim($routes->getRegex(), '/');
-            $pattern = "@^{$this->basePath}{$route}/?$@i";
+            $pattern = '@^' . preg_quote($this->basePath) . preg_quote($route). '/?$@i';
             if (!preg_match($pattern, $requestUrl, $matches)) {
                 continue;
             }