Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory :  /home/corals/old/vendor/magento/framework/Session/Config/Validator/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php
/**
 * Copyright © Magento, Inc. All rights reserved.
 * See COPYING.txt for license details.
 */

namespace Magento\Framework\Session\Config\Validator;

use Laminas\Validator\Hostname;
use Magento\Framework\Validator\AbstractValidator;

/**
 * Session cookie domain validator
 */
class CookieDomainValidator extends AbstractValidator
{
    /**
     * @inheritDoc
     */
    public function isValid($value)
    {
        $this->_clearMessages();

        if (!is_string($value)) {
            $this->_addMessages(['must be a string']);

            return false;
        }

        //Hostname validator allows [;,] and returns the validator as true but,
        //these are unacceptable cookie domain characters hence need explicit validation for the same
        if (preg_match('/[;,]/', $value)) {
            $this->_addMessages(['invalid character in cookie domain']);

            return false;
        }

        $validator = new Hostname(Hostname::ALLOW_ALL);

        if (!empty($value) && !$validator->isValid($value)) {
            $this->_addMessages($validator->getMessages());

            return false;
        }

        return true;
    }
}