fix(Preview): Check strict _preview param value (allowing 0, `fal…

…se` values to disable preview mode)
roadiz · Jun 23, 2023 · 70b60c9 · 70b60c9
1 parent 5bd821b
commit 70b60c9
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/lib/RoadizCoreBundle/src/Preview/EventSubscriber/PreviewModeSubscriber.php b/lib/RoadizCoreBundle/src/Preview/EventSubscriber/PreviewModeSubscriber.php
@@ -62,7 +62,11 @@ public function onKernelRequest(RequestEvent $event): void
         if (
             $event->isMainRequest() &&
             $request->query->has(static::QUERY_PARAM_NAME) &&
-            (bool) ($request->query->get(static::QUERY_PARAM_NAME, 0)) === true
+            \in_array(
+                $request->query->get(static::QUERY_PARAM_NAME, 0),
+                ['true', true, '1', 1, 'on', 'yes', 'y'],
+                true
+            )
         ) {
             $request->attributes->set('preview', true);
         }