Harden module.php endpoint against no input

tvdijen · tvdijen · commit 54bd686afb49 · 2023-11-27T21:28:16.000+01:00
diff --git a/src/SimpleSAML/Module.php b/src/SimpleSAML/Module.php
@@ -168,7 +168,7 @@ public static function process(Request $request = null): Response
             $request = Request::createFromGlobals();
         }
 
-        if ($request->server->get('PATH_INFO') === '/') {
+        if ($request->server->get('PATH_INFO') === '/' || $request->server->get('PATH_INFO') === null) {
             throw new Error\NotFound('No PATH_INFO to module.php');
         }
 

Original file line number	Diff line number	Diff line change
`@@ -168,7 +168,7 @@ public static function process(Request $request = null): Response`
`168`	`168`	`$request = Request::createFromGlobals();`
`169`	`169`	`}`
`170`	`170`
`171`		`- if ($request->server->get('PATH_INFO') === '/') {`
	`171`	`+ if ($request->server->get('PATH_INFO') === '/' \|\| $request->server->get('PATH_INFO') === null) {`
`172`	`172`	`throw new Error\NotFound('No PATH_INFO to module.php');`
`173`	`173`	`}`
`174`	`174`