Merge pull request #3001 from big-dream/6.0-issues-2996

big-dream · web-flow · commit d3904e51e279 · 2024-04-16T10:01:53.000+08:00
修正 $key 未编码导致的异常页面 XSS 漏洞(ThinkPHP 6.0)
diff --git a/src/tpl/think_exception.tpl b/src/tpl/think_exception.tpl
@@ -68,7 +68,7 @@ if (!function_exists('parse_args')) {
                     break;
             }
 
-            $result[] = is_int($key) ? $value : "'{$key}' => {$value}";
+            $result[] = is_int($key) ? $value : sprintf('\'%s\' => %s', htmlentities($key), $value);
         }
 
         return implode(', ', $result);

Original file line number	Diff line number	Diff line change
`@@ -68,7 +68,7 @@ if (!function_exists('parse_args')) {`
`68`	`68`	`break;`
`69`	`69`	`}`
`70`	`70`
`71`		`- $result[] = is_int($key) ? $value : "'{$key}' => {$value}";`
	`71`	`+ $result[] = is_int($key) ? $value : sprintf('\'%s\' => %s', htmlentities($key), $value);`
`72`	`72`	`}`
`73`	`73`
`74`	`74`	`return implode(', ', $result);`