mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-10-22 12:05:37 +00:00
74f65540a2
Not a security issue as such, since the user input is sanitized before being used in Versioned->augmentSQL(). But it shouldn't reach the session state either, since that's commonly assumed to be sanitized data, and it leaves unnecessary room for error. strtotime() has fairly loose validation rules around dates, but its a good "first line of defence".