| Index: trunk/phase3/includes/Status.php |
| — | — | @@ -84,6 +84,13 @@ |
| 85 | 85 | $this->ok = false; |
| 86 | 86 | } |
| 87 | 87 | |
| | 88 | + /** |
| | 89 | + * Sanitize the callback parameter on wakeup, to avoid arbitrary execution. |
| | 90 | + */ |
| | 91 | + function __wakeup() { |
| | 92 | + $this->cleanCallback = false; |
| | 93 | + } |
| | 94 | + |
| 88 | 95 | protected function cleanParams( $params ) { |
| 89 | 96 | if ( !$this->cleanCallback ) { |
| 90 | 97 | return $params; |