Skip to content

Ensure parameters in POST override other LTI values - #10

Merged
Izumi-kun merged 1 commit into
Izumi-kun:masterfrom
mdjnelson:prevent-altering-sent-data
Sep 3, 2018
Merged

Ensure parameters in POST override other LTI values#10
Izumi-kun merged 1 commit into
Izumi-kun:masterfrom
mdjnelson:prevent-altering-sent-data

Conversation

@Izumi-kun

@Izumi-kun Izumi-kun commented Jun 27, 2018

Copy link
Copy Markdown
Owner

Discussion: 1EdTech#48

@Izumi-kun Izumi-kun closed this Jun 27, 2018
@Izumi-kun
Izumi-kun changed the base branch from 1.1 to master June 27, 2018 13:14
@Izumi-kun Izumi-kun reopened this Jun 27, 2018
@Izumi-kun Izumi-kun changed the title Prevent parameters in POST overriding other values Ensure parameters in POST override other LTI values Jun 28, 2018
@dac514

dac514 commented Aug 3, 2018

Copy link
Copy Markdown

Please merge? We're still using this library. It's clearly the best PHP option out here for now.

@Izumi-kun
Izumi-kun merged commit 1b064ec into Izumi-kun:master Sep 3, 2018
// If there are parameters in $_POST, these are likely what will be used. Therefore, they should be considered
// the final value in the case of any duplicates from sources parsed above.
foreach ($_POST as $key => $value) {
$parameters[$key] = OAuthUtil::urldecode_rfc3986($value);

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why need urldecode here?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants