Replies: 1 comment 1 reply
-
|
That fix is for this GHSA-78fx-h6xr-vch4 |
Beta Was this translation helpful? Give feedback.
1 reply
-
|
We overwrote the validator class for backward compatibility for laravel 8 and 9 like this to cover that vulnerability: |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello,
My team and I are trying to upgrade our system to the latest version of Laravel. We are currently 10.48.28. Upgrading to 10.48.29 (bump from using dependabot), we are experiencing an issue with generating our API documentation.
We are using Scribe to generate our API documentation but bumping to 10.48.29 introduces a change in the Validator class, which is kind of breaking for us - it appends a hash to the request body/param when it starts with DOT or Asteriks. Here is the PR that introduces this change.
Could you please explain to me the purpose of that change and if you have an idea how we could "fix" that on our side without overwriting the Validator class? 🤔
cc @crynobone
Beta Was this translation helpful? Give feedback.
All reactions