From da4c6d7cb85ca27c0429df8a383da0813b848992 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Bar=C3=A1=C5=A1ek?= <janbarasek@gmail.com>
Date: Fri, 1 Nov 2019 12:10:33 +0100
Subject: [PATCH 1/2] BlueScreen HTTP Request: Add support for rendering PHP
 Input

---
 src/Tracy/BlueScreen/assets/content.phtml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/Tracy/BlueScreen/assets/content.phtml b/src/Tracy/BlueScreen/assets/content.phtml
index 0a7404bbc..5aae37e34 100644
--- a/src/Tracy/BlueScreen/assets/content.phtml
+++ b/src/Tracy/BlueScreen/assets/content.phtml
@@ -309,6 +309,18 @@ $code = $exception->getCode() ? ' #' . $exception->getCode() : '';
 			</table>
 			</div>
 
+			<?php
+			if (($phpInput = (string) file_get_contents('php://input')) !== ''):
+			?>
+			<h3>PHP Input</h3>
+			<pre class="code"><?= Helpers::escapeHtml($phpInput) ?></pre>
+			<?php
+			if (strlen($phpInput) < 10000 && preg_match('/^\{.*\}$/', $phpInput)) {
+		  	echo $dump(json_decode($phpInput, true));
+			}
+			endif
+			?>
+
 
 			<?php foreach (['_GET', '_POST', '_COOKIE'] as $name): ?>
 			<h3>$<?= Helpers::escapeHtml($name) ?></h3>

From a584d16f2b86908ebf775453ce608d0def0c0023 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Bar=C3=A1=C5=A1ek?= <janbarasek@gmail.com>
Date: Sat, 2 Nov 2019 17:42:57 +0100
Subject: [PATCH 2/2] Content.phtml: Added PHP Input maxlen for long inputs and
 json detection as HTTP header.

---
 src/Tracy/BlueScreen/assets/content.phtml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/Tracy/BlueScreen/assets/content.phtml b/src/Tracy/BlueScreen/assets/content.phtml
index 5aae37e34..b721c66cf 100644
--- a/src/Tracy/BlueScreen/assets/content.phtml
+++ b/src/Tracy/BlueScreen/assets/content.phtml
@@ -310,12 +310,12 @@ $code = $exception->getCode() ? ' #' . $exception->getCode() : '';
 			</div>
 
 			<?php
-			if (($phpInput = (string) file_get_contents('php://input')) !== ''):
+			if (($phpInput = (string) file_get_contents('php://input', false, null, 0, 10000)) !== ''):
 			?>
 			<h3>PHP Input</h3>
 			<pre class="code"><?= Helpers::escapeHtml($phpInput) ?></pre>
 			<?php
-			if (strlen($phpInput) < 10000 && preg_match('/^\{.*\}$/', $phpInput)) {
+			if (strlen($phpInput) < 9500 && strncmp($httpHeaders['Content-Type'] ?? '', 'application/json', 16) === 0) {
 		  	echo $dump(json_decode($phpInput, true));
 			}
 			endif