From: Cyperghost <olaf_schmitz_1@t-online.de>
Date: Wed, 16 Oct 2024 06:40:07 +0000 (+0200)
Subject: Validate the language parameter
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=1f36cfe574bc5d77d8bafaf2926057736727f7c9;p=GitHub%2FWoltLab%2FWCF.git

Validate the language parameter
---

diff --git a/wcfsetup/install/files/emoji/index.php b/wcfsetup/install/files/emoji/index.php
index fbe95f2dac..d7e45e4780 100644
--- a/wcfsetup/install/files/emoji/index.php
+++ b/wcfsetup/install/files/emoji/index.php
@@ -17,7 +17,7 @@ use GuzzleHttp\Psr7\Header;
 
 require(__DIR__ . '/../lib/system/api/autoload.php');
 
-if (!isset($_GET['l'])) {
+if (!isset($_GET['l']) || !\preg_match('~^[A-Za-z\-]+$~', $_GET['l'])) {
     @\http_response_code(404);
     exit;
 }