Fix Possibility for Denial of Service by overwriting PHP files with language exports in barryvdh/laravel-translation-manager

freescout-help-desk · freescout-help-desk · commit 6133547617f6 · 2023-09-22T23:15:15.000-07:00
diff --git a/overrides/barryvdh/laravel-translation-manager/src/Manager.php b/overrides/barryvdh/laravel-translation-manager/src/Manager.php
@@ -672,7 +672,7 @@ public function getLocales()
 
     public function addLocale($locale)
     {
-        $localeDir = $this->app->langPath().'/'.$locale;
+        $localeDir = $this->app->langPath().'/'.basename($locale);
 
         $this->ignoreLocales = array_diff($this->ignoreLocales, [$locale]);
         $this->saveIgnoredLocales();

Original file line number	Diff line number	Diff line change
`@@ -672,7 +672,7 @@ public function getLocales()`
`672`	`672`
`673`	`673`	`public function addLocale($locale)`
`674`	`674`	`{`
`675`		`- $localeDir = $this->app->langPath().'/'.$locale;`
	`675`	`+ $localeDir = $this->app->langPath().'/'.basename($locale);`
`676`	`676`
`677`	`677`	`$this->ignoreLocales = array_diff($this->ignoreLocales, [$locale]);`
`678`	`678`	`$this->saveIgnoredLocales();`