Secure extracts
Updated extract calls to use EXTR_SKIP.
This commit is contained in:
@@ -61,7 +61,7 @@ class Cookie implements Driver {
|
||||
*/
|
||||
public function save($session, $config, $exists)
|
||||
{
|
||||
extract($config);
|
||||
extract($config, EXTR_SKIP);
|
||||
|
||||
$payload = $this->crypter->encrypt(serialize($session));
|
||||
|
||||
|
||||
Reference in New Issue
Block a user