Merge branch '6.4' into 7.2

alexandre-daubois · alexandre-daubois · commit 0c15d5e9fc6a · 2025-05-12T16:48:02.000+02:00
* 6.4:
  Fix: prevent "Cannot traverse an already closed generator" error by materializing Traversable input
  [HttpFoundation] Fix: Encode path in X-Accel-Redirect header
diff --git a/BinaryFileResponse.php b/BinaryFileResponse.php
@@ -237,7 +237,7 @@ public function prepare(Request $request): static
                         $path = $location.substr($path, \strlen($pathPrefix));
                         // Only set X-Accel-Redirect header if a valid URI can be produced
                         // as nginx does not serve arbitrary file paths.
-                        $this->headers->set($type, $path);
+                        $this->headers->set($type, rawurlencode($path));
                         $this->maxlen = 0;
                         break;
                     }
diff --git a/Tests/BinaryFileResponseTest.php b/Tests/BinaryFileResponseTest.php
@@ -314,7 +314,15 @@ public function testXAccelMapping($realpath, $mapping, $virtual)
         $property->setValue($response, $file);
 
         $response->prepare($request);
-        $this->assertEquals($virtual, $response->headers->get('X-Accel-Redirect'));
+        $header = $response->headers->get('X-Accel-Redirect');
+
+        if ($virtual) {
+            // Making sure the path doesn't contain characters unsupported by nginx
+            $this->assertMatchesRegularExpression('/^([^?%]|%[0-9A-F]{2})*$/', $header);
+            $header = rawurldecode($header);
+        }
+
+        $this->assertEquals($virtual, $header);
     }
 
     public function testDeleteFileAfterSend()
@@ -361,6 +369,7 @@ public static function getSampleXAccelMappings()
             ['/home/Foo/bar.txt', '/var/www/=/files/,/home/Foo/=/baz/', '/baz/bar.txt'],
             ['/home/Foo/bar.txt', '"/var/www/"="/files/", "/home/Foo/"="/baz/"', '/baz/bar.txt'],
             ['/tmp/bar.txt', '"/var/www/"="/files/", "/home/Foo/"="/baz/"', null],
+            ['/var/www/var/www/files/foo%.txt', '/var/www/=/files/', '/files/var/www/files/foo%.txt'],
         ];
     }
 

Original file line number	Diff line number	Diff line change
`@@ -237,7 +237,7 @@ public function prepare(Request $request): static`
`237`	`237`	`$path = $location.substr($path, \strlen($pathPrefix));`
`238`	`238`	`// Only set X-Accel-Redirect header if a valid URI can be produced`
`239`	`239`	`// as nginx does not serve arbitrary file paths.`
`240`		`- $this->headers->set($type, $path);`
	`240`	`+ $this->headers->set($type, rawurlencode($path));`
`241`	`241`	`$this->maxlen = 0;`
`242`	`242`	`break;`
`243`	`243`	`}`