From 8b75c9e51864b300e476262e6e6246c871f9a8f6 Mon Sep 17 00:00:00 2001 From: Alexander Ebert Date: Tue, 29 Oct 2013 20:15:56 +0100 Subject: [PATCH] Sending HTTP 400 if type is empty/invalid --- wcfsetup/install/files/font/getFont.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/wcfsetup/install/files/font/getFont.php b/wcfsetup/install/files/font/getFont.php index 9961622c33..ac9e0b96c9 100644 --- a/wcfsetup/install/files/font/getFont.php +++ b/wcfsetup/install/files/font/getFont.php @@ -42,7 +42,9 @@ if (!empty($_GET['type'])) { die($data); } - die("Invalid type '" . $_GET['type'] . "' given"); + header("HTTP/1.1 400 Bad Request"); + die("Invalid type '" . htmlentities($_GET['type']) . "' given"); } +header("HTTP/1.1 400 Bad Request"); die("Missing type parameter"); -- 2.20.1