Explicitly set URL parameter separator for external URLs
Summary: PHP has this crazy [[ http://php.net/arg_separator.output | arg_separator.output ]] INI setting which allows setting different string for URL parameters separator instead of `&` (e.g. in `?a=1&b=2`). Don't use it for external URLs. Test Plan: Log in through OAuth. Reviewers: epriestley Reviewed By: epriestley CC: aran, Koolvin Differential Revision: https://secure.phabricator.com/D2284
This commit is contained in:
@@ -255,7 +255,7 @@ final class PhabricatorOAuthLoginController
|
||||
'code' => $code,
|
||||
) + $provider->getExtraTokenParameters();
|
||||
|
||||
$post_data = http_build_query($query_data);
|
||||
$post_data = http_build_query($query_data, '', '&');
|
||||
$post_length = strlen($post_data);
|
||||
|
||||
$stream_context = stream_context_create(
|
||||
|
||||
Reference in New Issue
Block a user