David Grudl dg

## patch-CVE-2020-15227.php
<?php

# In-place apply the CVE-2020-15227 nette/application patch
# This is a universal patcher for all affected versions.

# Run with `php patch-CVE-2020-15227.php`

# Inspiration: @spazef0rze

## typehints.php
<?php

declare(strict_types=1);

require '/nette.phar';


class TypeHints
{
	public $ignoredTypes = ['mixed', 'resource'];

## StrictObject.php
<?php

/**
 * This file is part of the Nette Framework (https://nette.org)
 * Copyright (c) 2004 David Grudl (https://davidgrudl.com)
 */

namespace Nette;

use Nette\Utils\ObjectHelpers;

## composing.presenters.php
<?php

// composing presenters without inheritance
// (requires nette/application 2.4.11)


trait RequireLoggedUser
{
	public function injectRequireLoggedUser()
	{

## persistent.parameter.trait.php
<?php

// transfer of a persistent parameter between two presenters without an inheritance
// (requires nette/application 3.0.0)


trait LangParameter
{
	/** @persistent */
	public $lang;

## typehints.php
<?php

declare(strict_types=1);

require '/nette.phar';


class TypeHints
{
	public $php71 = true;

## gist:92b041f0315a5fe5745819b180bf7237
<!DOCTYPE html>
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
</head>
<div style="width: 300px; height: 300px; background: blue"></div>

## ssl.conf
server {
	...

	listen 443 ssl;

	listen 80;

	if ($server_port = 80) {
		set $xp A;
	}

## latte-php-mix.php
<?php

namespace App\Presenters;

use Nette;
use App\Model;


class HomepagePresenter extends BasePresenter
{

## verifyIC.php
<?php

function verifyIC($ic)
{
	// be liberal in what you receive
	$ic = preg_replace('#\s+#', '', $ic);

	// má požadovaný tvar?
	if (!preg_match('#^\d{8}$#', $ic)) {
		return FALSE;
	<?php

	# In-place apply the CVE-2020-15227 nette/application patch
	# This is a universal patcher for all affected versions.

	# Run with `php patch-CVE-2020-15227.php`

	# Inspiration: @spazef0rze
	<?php

	declare(strict_types=1);

	require '/nette.phar';


	class TypeHints
	{
	public $ignoredTypes = ['mixed', 'resource'];
	<?php

	/**
	* This file is part of the Nette Framework (https://nette.org)
	* Copyright (c) 2004 David Grudl (https://davidgrudl.com)
	*/

	namespace Nette;

	use Nette\Utils\ObjectHelpers;
	<?php

	// composing presenters without inheritance
	// (requires nette/application 2.4.11)


	trait RequireLoggedUser
	{
	public function injectRequireLoggedUser()
	{
	<?php

	// transfer of a persistent parameter between two presenters without an inheritance
	// (requires nette/application 3.0.0)


	trait LangParameter
	{
	/** @persistent */
	public $lang;
	<!DOCTYPE html>
	<head>
	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	</head>
	<div style="width: 300px; height: 300px; background: blue"></div>
	server {
	...

	listen 443 ssl;

	listen 80;

	if ($server_port = 80) {
	set $xp A;
	}
	<?php

	namespace App\Presenters;

	use Nette;
	use App\Model;


	class HomepagePresenter extends BasePresenter
	{
	<?php

	function verifyIC($ic)
	{
	// be liberal in what you receive
	$ic = preg_replace('#\s+#', '', $ic);

	// má požadovaný tvar?
	if (!preg_match('#^\d{8}$#', $ic)) {
	return FALSE;