public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code

Fix windows parameter encoding to prevent abuse of unicode characters with best fit encoding conversion

2.2
Jordi Boggiano 2024-06-10 21:28:19 +02:00
parent 47374343a1
commit ba4ad2408a
No known key found for this signature in database
GPG Key ID: 7BBD42C429EC80BC
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/Composer/Util/ProcessExecutor.php
View File

@ -488,7 +488,9 @@ class ProcessExecutor
} }
// New lines break cmd.exe command parsing // New lines break cmd.exe command parsing
$argument = strtr($argument, "\n", ' '); // and special chars like the fullwidth quote can be used to break out
// of parameter encoding via "Best Fit" encoding conversion
$argument = strtr($argument, ["\n" => ' ', '＂' => '"', '：' => ':', '／' => '/']);
// In addition to whitespace, commas need quoting to preserve paths // In addition to whitespace, commas need quoting to preserve paths
$quote = strpbrk($argument, " \t,") !== false; $quote = strpbrk($argument, " \t,") !== false;