From 63786165cd7a0a4e80ebda0a75c77d74462ba036 Mon Sep 17 00:00:00 2001
From: Hayder Sharhan <hsharhan@ebay.com>
Date: Thu, 25 Feb 2016 16:09:53 -0600
Subject: [PATCH] MAGETWO-48819: [GitHub #3233] Arbitrary PHP code execution in
M2.0.2
- No need to add slashes now that we do not do eval.
---
setup/src/Magento/Setup/Module/I18n/Dictionary/Phrase.php | 1 -
1 file changed, 1 deletion(-)
diff --git a/setup/src/Magento/Setup/Module/I18n/Dictionary/Phrase.php b/setup/src/Magento/Setup/Module/I18n/Dictionary/Phrase.php
index d914b63ffcd..e5c20133fa0 100644
--- a/setup/src/Magento/Setup/Module/I18n/Dictionary/Phrase.php
+++ b/setup/src/Magento/Setup/Module/I18n/Dictionary/Phrase.php
@@ -271,7 +271,6 @@ class Phrase
preg_match_all('/[^\\\\]' . $encloseQuote . '|' . $encloseQuote . '[^\\\\]/', $string, $matches);
if (count($matches[0])) {
$string = preg_replace('/([^\\\\])' . $encloseQuote . ' ?\. ?' . $encloseQuote . '/', '$1', $string);
- $string = addslashes($string);
}
return $string;
}
--
GitLab