prevent insecure characters in locale

Author: taylorotwell

src/Illuminate/Translation/Translator.php

@@ -10,6 +10,7 @@
 use Illuminate\Support\NamespacedItemResolver;
 use Illuminate\Support\Str;
 use Illuminate\Support\Traits\Macroable;
+use InvalidArgumentException;
 
 class Translator extends NamespacedItemResolver implements TranslatorContract
 {
@@ -406,6 +407,10 @@ public function getLocale()
      */
     public function setLocale($locale)
     {
+        if (Str::contains($locale, ['.', '/', '\\'])) {
+            throw new InvalidArgumentException('Invalid characters present in locale.');
+        }
+
         $this->locale = $locale;
     }