php/yii2
1
0
Fork 0
mirror of https://github.com/yiisoft/yii2.git synced 2025-11-03 05:48:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix #18313: Fix multipart form data parse with double quotes

Browse Source
This commit is contained in:
Walid Said
2020-10-05 12:08:32 +02:00
committed by GitHub
parent 3f3003d823
commit 3dabcdb6ab
3 changed files with 43 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
framework/web/MultipartFormDataParser.php
View File

@ -141,10 +141,11 @@ class MultipartFormDataParser extends BaseObject implements RequestParserInterfa
return [];
}
if (!preg_match('/boundary=(.*)$/is', $contentType, $matches)) {
if (!preg_match('/boundary="?(.*)"?$/is', $contentType, $matches)) {
return [];
}
$boundary = $matches[1];
$boundary = trim($matches[1], '"');
$bodyParts = preg_split('/\\R?-+' . preg_quote($boundary, '/') . '/s', $rawBody);
array_pop($bodyParts); // last block always has no data, contains boundary ending like `--`