Replace undocumented 'FILTER_SANITIZE_FULL_SPECIAL_CHARS' filter by common 'FILTER_UNSAFE_RAW' filter

7-zete-7 · 7-zete-7 · commit fb284aeda8e2 · 2023-04-05T16:40:31.000+03:00
diff --git a/src/PAMI/Message/Message.php b/src/PAMI/Message/Message.php
@@ -159,7 +159,7 @@ protected function sanitizeInput($value)
             if (strcasecmp($value, 'off') === 0 || strcasecmp($value, 'false') === 0 || strcasecmp($value, 'no') === 0) {
                 return (boolean)false;
             }
-            if (filter_var($value, FILTER_SANITIZE_FULL_SPECIAL_CHARS, FILTER_NULL_ON_FAILURE)) {
+            if (filter_var($value, FILTER_UNSAFE_RAW, FILTER_NULL_ON_FAILURE)) {
                 return (string)htmlspecialchars($value, ENT_QUOTES);
             }
             throw new PAMIException("Incoming String is not sanitary. Skipping: '" . $value . "'\n");

Original file line number	Diff line number	Diff line change
`@@ -159,7 +159,7 @@ protected function sanitizeInput($value)`
`159`	`159`	`if (strcasecmp($value, 'off') === 0 \|\| strcasecmp($value, 'false') === 0 \|\| strcasecmp($value, 'no') === 0) {`
`160`	`160`	`return (boolean)false;`
`161`	`161`	`}`
`162`		`- if (filter_var($value, FILTER_SANITIZE_FULL_SPECIAL_CHARS, FILTER_NULL_ON_FAILURE)) {`
	`162`	`+ if (filter_var($value, FILTER_UNSAFE_RAW, FILTER_NULL_ON_FAILURE)) {`
`163`	`163`	`return (string)htmlspecialchars($value, ENT_QUOTES);`
`164`	`164`	`}`
`165`	`165`	`throw new PAMIException("Incoming String is not sanitary. Skipping: '" . $value . "'\n");`