Port fix for misconfigured servers from the CMS

joomla-framework · Aug 26, 2022 · 5e29f3d · 5e29f3d
1 parent 86f6cbb
commit 5e29f3d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/AbstractWebApplication.php b/src/AbstractWebApplication.php
@@ -827,6 +827,9 @@ protected function detectRequestUri()
             }
         }
 
+        // Extra cleanup to remove invalid chars in the URL to prevent injections through the Host header
+        $uri = str_replace(array("'", '"', '<', '>'), array('%27', '%22', '%3C', '%3E'), $uri);
+
         return \trim($uri);
     }