Skip to content

Commit fda63bd

Browse files
authored
fix: filter values are not validated (#3795)
1 parent 48bde03 commit fda63bd

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

src/Query/SubscriptionFilterGambit.php

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,16 @@
1111

1212
use Flarum\Filter\FilterInterface;
1313
use Flarum\Filter\FilterState;
14+
use Flarum\Filter\ValidateFilterTrait;
1415
use Flarum\Search\AbstractRegexGambit;
1516
use Flarum\Search\SearchState;
1617
use Flarum\User\User;
1718
use Illuminate\Database\Query\Builder;
1819

1920
class SubscriptionFilterGambit extends AbstractRegexGambit implements FilterInterface
2021
{
22+
use ValidateFilterTrait;
23+
2124
protected function getGambitPattern()
2225
{
2326
return 'is:(follow|ignor)(?:ing|ed)';
@@ -33,8 +36,10 @@ public function getFilterKey(): string
3336
return 'subscription';
3437
}
3538

36-
public function filter(FilterState $filterState, string $filterValue, bool $negate)
39+
public function filter(FilterState $filterState, $filterValue, bool $negate)
3740
{
41+
$filterValue = $this->asString($filterValue);
42+
3843
preg_match('/^'.$this->getGambitPattern().'$/i', 'is:'.$filterValue, $matches);
3944

4045
$this->constrain($filterState->getQuery(), $filterState->getActor(), $matches[1], $negate);

0 commit comments

Comments
 (0)