From a449c74e59dd21d1aad532833151e8c4572fd23e Mon Sep 17 00:00:00 2001 From: Peter Philipp Date: Thu, 28 Jan 2021 10:35:48 +1300 Subject: [PATCH] Don't submit unnamed form without any data on non POST request. --- .../Extension/HttpFoundation/HttpFoundationRequestHandler.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/CoreShop/Bundle/ResourceBundle/Form/Extension/HttpFoundation/HttpFoundationRequestHandler.php b/src/CoreShop/Bundle/ResourceBundle/Form/Extension/HttpFoundation/HttpFoundationRequestHandler.php index 6931999ada..785c48f98d 100644 --- a/src/CoreShop/Bundle/ResourceBundle/Form/Extension/HttpFoundation/HttpFoundationRequestHandler.php +++ b/src/CoreShop/Bundle/ResourceBundle/Form/Extension/HttpFoundation/HttpFoundationRequestHandler.php @@ -62,6 +62,10 @@ public function handleRequest(FormInterface $form, $request = null): void if ('GET' === $method || 'HEAD' === $method || 'TRACE' === $method) { if ('' === $name) { $data = $request->query->all(); + // No data - nothing to submit. + if (!count($data)) { + return; + } } else { // Don't submit GET requests if the form's name does not exist // in the request