Backport [ecd1f26]

jacques · jacques · commit a91c42d8a749 · 2025-01-07T07:31:29.000Z
diff --git a/src/Guard.php b/src/Guard.php
@@ -192,7 +192,7 @@ public function validateStorage()
         if (!isset($_SESSION)) {
             throw new RuntimeException('CSRF middleware failed. Session not found.');
         }
-        if (!array_key_exists($this->prefix, $_SESSION)) {
+        if (!array_key_exists($this->prefix, $_SESSION) || !\is_array($_SESSION[$this->prefix])) {
             $_SESSION[$this->prefix] = [];
         }
         $this->storage = &$_SESSION[$this->prefix];

Original file line number	Diff line number	Diff line change
`@@ -192,7 +192,7 @@ public function validateStorage()`
`192`	`192`	`if (!isset($_SESSION)) {`
`193`	`193`	`throw new RuntimeException('CSRF middleware failed. Session not found.');`
`194`	`194`	`}`
`195`		`- if (!array_key_exists($this->prefix, $_SESSION)) {`
	`195`	`+ if (!array_key_exists($this->prefix, $_SESSION) \|\| !\is_array($_SESSION[$this->prefix])) {`
`196`	`196`	`$_SESSION[$this->prefix] = [];`
`197`	`197`	`}`
`198`	`198`	`$this->storage = &$_SESSION[$this->prefix];`