Skip to content

Commit 221833e

Browse files
author
Slavey Karadzhov
committed
Prevent sending internal parameters.
1 parent cbbdd8c commit 221833e

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

src/ZendServerWebApi/Controller/ApiController.php

+7-1
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,13 @@ public function onDispatch (MvcEvent $e)
2929
//Manage parameter
3030
$requestParameters = array();
3131
foreach ($routeMatch->getParams() as $name => $value) {
32-
if (in_array($name, array('action','controller'))) continue;
32+
if (in_array($name, array('action','controller',
33+
'zssecret','zsurl','zskey','zsversion',
34+
'http', 'output-format'
35+
))) {
36+
continue;
37+
}
38+
3339
$requestParameters[$name] = $value;
3440
}
3541
if(method_exists($this, $action.'Action')) {

0 commit comments

Comments
 (0)