Improve sanitization of color inputs

2021-01-30 22:56:00 +01:00 · 2021-01-30 22:56:00 +01:00 · 7a252c6bfa
commit 7a252c6bfa
parent 89e06769f1
1 changed files with 3 additions and 1 deletions
--- a/MD_STD_IN.php
+++ b/MD_STD_IN.php
@ -98,7 +98,9 @@ final class MD_STD_IN {
            FILTER_SANITIZE_STRING,
            FILTER_FLAG_NO_ENCODE_QUOTES);

-        if (!(preg_match('/^[a-zA-Z0-9]{3}$/', $output)) && !(preg_match('/^[a-zA-Z0-9]{6}$/', $output))) {
+        if ($output === false
+            || ((preg_match('/^[a-zA-Z0-9]{3}$/', $output)) === false && (preg_match('/^[a-zA-Z0-9]{6}$/', $output)) === false)
+        ) {
            throw new MDInvalidColorCode("Invalid color code provided: " . $output);
        }