CVE-2024-34102 patcher

cve-2024-34102.sh

export DRYRUN="--dry-run"

if [ -n "${CONFIRM}" ]
then
  export DRYRUN=""
fi

patch -p1 $DRYRUN << EOF
diff --git a/app/bootstrap.php b/app/bootstrap.php
--- a/app/bootstrap.php
+++ b/app/bootstrap.php
@@ -4,6 +4,12 @@
  * See COPYING.txt for license details.
  */

+if (strpos(file_get_contents('php://input'), 'dataIsURL') !== false) {
+    header('HTTP/1.1 503 Service Temporarily Unavailable');
+    header('Status: 503 Service Temporarily Unavailable');
+    exit;
+}
+
 /**
  * Environment initialization
  */
EOF