Update src/Security/Voter/AssetVoter.php

frankdekker · Copilot · web-flow · commit b41ca4cca7b6 · 2025-09-19T20:53:52.000+02:00
Co-authored-by: Copilot &lt;175728472+Copilot@users.noreply.github.com&gt;
diff --git a/src/Security/Voter/AssetVoter.php b/src/Security/Voter/AssetVoter.php
@@ -38,6 +38,10 @@ protected function voteOnAttribute(string $attribute, mixed $subject, TokenInter
         $hash  = Assert::notNull($this->requestStack->getCurrentRequest())->query->getString('hash');
         $asset = Assert::isInstanceOf($subject, Asset::class);
 
+        // Validate that the hash parameter is not empty before comparison
+        if ($hash === '' || $hash === null) {
+            return false;
+        }
         return hash_equals($asset->getHash(), $hash);
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -38,6 +38,10 @@ protected function voteOnAttribute(string $attribute, mixed $subject, TokenInter`
`38`	`38`	`$hash = Assert::notNull($this->requestStack->getCurrentRequest())->query->getString('hash');`
`39`	`39`	`$asset = Assert::isInstanceOf($subject, Asset::class);`
`40`	`40`
	`41`	`+ // Validate that the hash parameter is not empty before comparison`
	`42`	`+ if ($hash === '' \|\| $hash === null) {`
	`43`	`+ return false;`
	`44`	`+ }`
`41`	`45`	`return hash_equals($asset->getHash(), $hash);`
`42`	`46`	`}`
`43`	`47`	`}`