valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

rewrite_relative_url: validate resulting absolutized URLs

This commit is contained in:
Andrew Dolgov 2020-09-15 10:41:57 +03:00
parent aa89ea7769
commit 1621abcffc
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
include/functions.php
View File

@ -1526,10 +1526,10 @@
$rel_parts = parse_url($rel_url);
if ($rel_parts['host'] && $rel_parts['scheme']) {
return $rel_url;
return validate_url($rel_url);
} else if (strpos($rel_url, "//") === 0) {
# protocol-relative URL (rare but they exist)
return "https:" . $rel_url;
return validate_url("https:" . $rel_url);
} else if (strpos($rel_url, "magnet:") === 0) {
# allow magnet links
return $rel_url;
@ -1552,7 +1552,7 @@
$parts['path'] = str_replace("/./", "/", $parts['path']);
$parts['path'] = str_replace("//", "/", $parts['path']);
return build_url($parts);
return validate_url(build_url($parts));
}
}