BorisMorel/LdapBundle — pull request #20 by beberlei (2012-02-15 13:40:35+00:00)
Title: Fix issue where filter input from userland or other queries is not escap...

...ed in ldap_search().

This may in rare cases be a security issue when LDAP only returns exactly one user even on queries for "*" it may lead to disclosure of information, however i think through the way ldap_bind is used this cannot become a security issue to login arbitrary users without authentication.