Merge pull request #26132 from hedii/5.6

[5.6] hash_equals(): Expected user_string to be a string, null given
laravel · Oct 15, 2018 · 372dcf3 · 372dcf3
2 parents 7939094 + d32eae2
commit 372dcf3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Illuminate/Routing/UrlGenerator.php b/src/Illuminate/Routing/UrlGenerator.php
@@ -349,7 +349,7 @@ public function hasValidSignature(Request $request)
 
         $signature = hash_hmac('sha256', $original, call_user_func($this->keyResolver));
 
-        return  hash_equals($signature, $request->query('signature', '')) &&
+        return  hash_equals($signature, (string) $request->query('signature', '')) &&
                ! ($expires && Carbon::now()->getTimestamp() > $expires);
     }