do not pass more than one byte to ord()

xabbuh · xabbuh · commit cbdcffccbaec · 2025-09-27T17:48:31.000+02:00
diff --git a/src/Symfony/Component/JsonPath/Tokenizer/JsonPathTokenizer.php b/src/Symfony/Component/JsonPath/Tokenizer/JsonPathTokenizer.php
@@ -88,9 +88,8 @@ public static function tokenize(JsonPath $query): array
             if ($inQuote) {
                 // literal control characters (U+0000 through U+001F) in quoted strings
                 // are not be allowed unless they are part of escape sequences
-                $ord = \ord($char);
                 if ($inBracket) {
-                    if ($ord <= 31) {
+                    if (\ord($char[0]) <= 31) {
                         if (!self::isEscaped($chars, $i)) {
                             throw new InvalidJsonPathException('control characters are not allowed in quoted strings.', $position);
                         }
