Skip to content

Instantly share code, notes, and snippets.

diff --git a/includes/bootstrap.inc b/includes/bootstrap.inc
index 06acf93..d5963a0 100644
--- a/includes/bootstrap.inc
+++ b/includes/bootstrap.inc
@@ -2778,6 +2778,11 @@ function _drupal_bootstrap_variables() {
unset($_GET['destination']);
unset($_REQUEST['destination']);
}
+ // Use the DrupalRequestSanitizer to ensure that the destination's query
+ // parameters are not dangerous.

Keybase proof

I hereby claim:

  • I am msound on github.
  • I am msound (https://keybase.io/msound) on keybase.
  • I have a public key whose fingerprint is 7306 59F4 4C1E 89ED 3D08 C7BF BFAD 759A 6C96 C1EB

To claim this, I am signing this object:

@msound
msound / gist:fd72de7ff5f30c89cada
Created May 12, 2015 19:48
Running apache as vagrant
ruby_block "Run apache as vagrant user" do
block do
fe = Chef::Util::FileEdit.new("/etc/apache2/envvars")
fe.search_file_replace(/www-data/, 'vagrant')
fe.write_file
end
only_if "grep 'www-data' /etc/apache2/envvars"
notifies :restart, 'service[apache2]', :delayed
end