Merge branch 'security/rve-2026-3'

This commit is contained in:
Kijin Sung 2026-03-31 20:51:05 +09:00
commit ea4f116b4c
2 changed files with 6 additions and 2 deletions

View file

@ -209,6 +209,10 @@ class addonAdminController extends addonController
$args->{$key} = $vars->{$key} ?? '';
}
$args->xe_run_method = $vars->xe_run_method ?? '';
if (!in_array($args->xe_run_method, ['run_selected', 'no_run_selected']))
{
$args->xe_run_method = 'run_selected';
}
$args->mid_list = $vars->mid_list ?? [];
$output = $this->doSetup($addon_name, $args, $site_module_info->site_srl, 'site');

View file

@ -102,8 +102,8 @@ class addonController extends addon
$buff[] = '$before_time = microtime(true);';
// Run method and mid list
$run_method = ($extra_vars->xe_run_method ?? null) ?: 'run_selected';
$buff[] = '$rm = \'' . $run_method . "';";
$run_method = strval($extra_vars->xe_run_method ?? 'run_selected');
$buff[] = '$rm = ' . var_export($run_method, true) . ';';
$buff[] = '$ml = ' . var_export(array_fill_keys($mid_list, true), true) . ';';
$buff[] = '$_m = Context::get(\'mid\');';