tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

InternalUrlValidator: Also check the scheme

This commit is contained in:
Johannes Meyer 2022-12-01 15:50:46 +01:00
parent 965aac11ef
commit 3187a4e549
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
library/Icinga/Web/Form/Validator/InternalUrlValidator.php
View File

@ -3,6 +3,7 @@
namespace Icinga\Web\Form\Validator; namespace Icinga\Web\Form\Validator;
use Icinga\Application\Icinga;
use Zend_Validate_Abstract; use Zend_Validate_Abstract;
use Icinga\Web\Url; use Icinga\Web\Url;
@ -16,7 +17,8 @@ class InternalUrlValidator extends Zend_Validate_Abstract
*/ */
public function isValid($value) public function isValid($value)
{ {
if (Url::fromPath($value)->getRelativeUrl() === '') { $url = Url::fromPath($value);
if ($url->getRelativeUrl() === '' || $url->getScheme() !== Icinga::app()->getRequest()->getScheme()) {
$this->_error('IS_EXTERNAL'); $this->_error('IS_EXTERNAL');
return false; return false;