stankut

How to patch your Drupal 8 regarding SA-CORE-2018-002

All the changes in this file created based on original patch for Drupal 8.5.1

https://cgit.drupalcode.org/drupal/rawdiff/?h=8.5.x&id=5ac8738fa69df34a0635f0907d661b509ff9a28f

Check if your site is not patched before

There is no core/lib/Drupal/Core/Security/RequestSanitizer.php file.

Add RequestSanitizer.php file

stankut

How to patch your Drupal 8 regarding SA-CORE-2018-004

Check if your site doesn't have SA-CORE-2018-002 security update

If not please follow this manual How to patch your Drupal 8 regarding SA-CORE-2018-002

Add changes to your drupal core files

All changes in here is based on original patch for Drupal 8.5.2

stankut

diff --git a/core/lib/Drupal/Core/Security/RequestSanitizer.php b/core/lib/Drupal/Core/Security/RequestSanitizer.php
index 8ba17b9..44815f6 100644
--- a/core/lib/Drupal/Core/Security/RequestSanitizer.php
+++ b/core/lib/Drupal/Core/Security/RequestSanitizer.php
@@ -2,6 +2,8 @@
 
 namespace Drupal\Core\Security;
 
+use Drupal\Component\Utility\UrlHelper;
+use Symfony\Component\HttpFoundation\ParameterBag;

stankut

diff --git a/core/lib/Drupal/Core/Security/RequestSanitizer.php b/core/lib/Drupal/Core/Security/RequestSanitizer.php
new file mode 100644
index 0000000..8ba17b9
--- /dev/null
+++ b/core/lib/Drupal/Core/Security/RequestSanitizer.php
@@ -0,0 +1,99 @@
+<?php
+
+namespace Drupal\Core\Security;
+