Skip to content

Fixed crash on invalid query#15

Open
UCIS wants to merge 4 commits into
phpmongodb:masterfrom
UCIS:master
Open

Fixed crash on invalid query#15
UCIS wants to merge 4 commits into
phpmongodb:masterfrom
UCIS:master

Conversation

@UCIS

@UCIS UCIS commented Aug 21, 2015

Copy link
Copy Markdown

507c313: If the query fails because it contains invalid operators, phpmongodb will attempt to call a function on a non-object and crashes.

bf46a14: phpmongodb puts the raw representation of the MongoCursor directly in the HTML document. This can result in HTML injection if the Mongo documents contain HTML content. This patch fixes that by encoding the stringified representation of the MongoCursor.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant