[PR #614] [CLOSED] Updated BookController:store method to sanitize input #5675

New Issue

OVERLORD · 2026-02-05T10:13:54+03:00

OVERLORD commented

2026-02-05 10:13:54 +03:00

📋 Pull Request Information

Original PR: https://github.com/BookStackApp/BookStack/pull/614
Author: @ptcrash
Created: 12/11/2017
Status: ❌ Closed

Base: master ← Head: LookLittleJohn-patch-1

📝 Commits (1)

3419de1 Updated Store method to sanitize input

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 app/Http/Controllers/BookController.php (+1 -1)

📄 Description

Fixed a bug where a person could mess up the router by having books with slashes in the name as well as create books with the name of the create, which makes a book that is totally accessible since the route /books/create is already used for the book creation view.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/BookStackApp/BookStack/pull/614 **Author:** [@ptcrash](https://github.com/ptcrash) **Created:** 12/11/2017 **Status:** ❌ Closed **Base:** `master` ← **Head:** `LookLittleJohn-patch-1` --- ### 📝 Commits (1) - [`3419de1`](https://github.com/BookStackApp/BookStack/commit/3419de1c13b82135c539bace105260f67640f7e9) Updated Store method to sanitize input ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `app/Http/Controllers/BookController.php` (+1 -1) </details> ### 📄 Description Fixed a bug where a person could mess up the router by having books with slashes in the name as well as create books with the name of the `create`, which makes a book that is totally accessible since the route `/books/create` is already used for the book creation view. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

OVERLORD added the pull-request label 2026-02-05 10:13:54 +03:00

OVERLORD closed this issue

2026-02-05 10:13:55 +03:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#5675