fix(RouteParser): bail out if method name contains hashtag

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

lib/private/AppFramework/Routing/RouteParser.php

@@ -76,7 +76,7 @@ class RouteParser {
 		$url = $root . '/' . ltrim($route['url'], '/');
 		$verb = strtoupper($route['verb'] ?? 'GET');
 
-		$split = explode('#', $name, 2);
+		$split = explode('#', $name, 3);
 		if (count($split) !== 2) {
 			throw new \UnexpectedValueException('Invalid route name: use the format foo#bar to reference FooController::bar');
 		}

tests/lib/AppFramework/Routing/RouteParserTest.php

@@ -142,6 +142,15 @@ class RouteParserTest extends \Test\TestCase {
 		$this->parser->parseDefaultRoutes($routes, 'app1');
 	}
 
+	public function testParseRoutesInvalidName2(): void {
+		$routes = ['routes' => [
+			['name' => 'folders#open#action', 'url' => '/{folderId}/open', 'verb' => 'GET']
+		]];
+
+		$this->expectException(\UnexpectedValueException::class);
+		$this->parser->parseDefaultRoutes($routes, 'app1');
+	}
+
 	public function testParseRoutesEmpty(): void {
 		$routes = ['routes' => []];