Skip to content

Commit df5e0a5

Browse files
Copilotskerbis
andcommitted
Add comment explaining int casting for security
Co-authored-by: skerbis <791247+skerbis@users.noreply.github.com>
1 parent c28cfae commit df5e0a5

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

lib/rex_var_consent_manager.php

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,8 @@ class rex_var_consent_manager extends rex_var
44
{
55
protected function getOutput()
66
{
7-
// Extrahiere forceCache und forceReload Parameter
7+
// Extrahiere forceCache und forceReload Parameter mit int-Casting für Sicherheit
8+
// (verhindert Code-Injection und stellt sicher, dass nur numerische Werte verwendet werden)
89
$forceCache = (int) $this->getArg('forceCache', 0, false);
910
$forceReload = (int) $this->getArg('forceReload', 0, false);
1011

0 commit comments

Comments
 (0)