From 18d1ace1216e6485fecc2a2314330f73f2f33297 Mon Sep 17 00:00:00 2001 From: Kijin Sung Date: Sat, 8 Mar 2025 15:08:42 +0900 Subject: [PATCH] Enforce that values passed to urlencode() are strings --- common/framework/Router.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/common/framework/Router.php b/common/framework/Router.php index d4cac045a..021449f90 100644 --- a/common/framework/Router.php +++ b/common/framework/Router.php @@ -626,7 +626,7 @@ class Router $route = preg_replace_callback('#\\$([a-zA-Z0-9_]+)(:[a-z]+)?#i', function($match) use(&$vars) { if (isset($vars[$match[1]])) { - $replacement = urlencode($vars[$match[1]]); + $replacement = urlencode(strval($vars[$match[1]])); unset($vars[$match[1]]); return (isset($match[2]) && $match[2] === ':delete') ? '' : $replacement; }