Merge pull request #13238 from annando/issue-13221

[friendica.git] / src / Security / OAuth1 / OAuthUtil.php

diff --git a/src/Security/OAuth1/OAuthUtil.php b/src/Security/OAuth1/OAuthUtil.php
index bc30c800802491d46e90eb567bf833fab80214f9..06847eceb3002b76d387ad1c02de69187ac0989b 100644 (file)
--- a/src/Security/OAuth1/OAuthUtil.php
+++ b/src/Security/OAuth1/OAuthUtil.php
@@ -135,7 +135,7 @@ class OAuthUtil
                        $value     = isset($split[1]) ? OAuthUtil::urldecode_rfc3986($split[1]) : '';
 
                        if (isset($parsed_parameters[$parameter])) {
-                               // We have already recieved parameter(s) with this name, so add to the list
+                               // We have already received parameter(s) with this name, so add to the list
                                // of parameters with this name
 
                                if (is_scalar($parsed_parameters[$parameter])) {
@@ -154,6 +154,8 @@ class OAuthUtil
 
        public static function build_http_query($params)
        {
+               // Parameters are sorted by name, using lexicographical byte value ordering.
+               // Ref: Spec: 9.1.1 (1)
                uksort($params, 'strcmp');
                return http_build_query($params, '', null, PHP_QUERY_RFC3986);
        }