docs(tests): replace advisory ID with descriptive comment in healthcheck injection test

This commit is contained in:
Andras Bacsai 2026-04-20 13:28:55 +02:00
parent b74f54302b
commit 2264a2ef76

View file

@ -1,7 +1,7 @@
<?php
/**
* Regression tests for GHSA-gvc4-f276-r88p.
* Regression tests for database healthcheck command injection.
*
* Docker CMD-SHELL healthchecks pass the string to /bin/sh -c, enabling command injection
* via user-controlled DB username/password/database fields. The fix converts all affected