← All changes
|
src/Framework/PaymentGateways/Routes/GatewayRoute.php
+2
-6
4.15.3
→
4.17.0
View file →
| @@ -107,8 +107,9 @@ | ||
| 107 | 107 | |
| 108 | 108 | /** |
| 109 | 109 | * Validate signature using nonces |
| 110 | 110 | * |
| 111 | + * @since 4.16.8 verify the route's own query args against the signature | |
| 111 | 112 | * @since 2.19.5 replace nonce with hash |
| 112 | 113 | * @since 2.19.4 replace RouteSignature args with unique donationId |
| 113 | 114 | * @since 2.19.0 |
| 114 | 115 | * |
| @@ -118,14 +119,9 @@ | ||
| 118 | 119 | * @return void |
| 119 | 120 | */ |
| 120 | 121 | private function validateSignature($routeSignature, GatewayRouteData $data) |
| 121 | 122 | { |
| 122 | - $signature = new RouteSignature( | |
| 123 | - $data->gatewayId, | |
| 124 | - $data->gatewayMethod, | |
| 125 | - $data->routeSignatureId, | |
| 126 | - $data->routeSignatureExpiration | |
| 127 | - ); | |
| 123 | + $signature = RouteSignature::fromRouteData($data); | |
| 128 | 124 | |
| 129 | 125 | if (!$signature->isValid($routeSignature)) { |
| 130 | 126 | PaymentGatewayLog::error( |
| 131 | 127 | 'Invalid Secure Route', |