Merge pull request #3271 from Icinga/bugfix/fix-internalurlvalidator

InternalUrlValidator: prevent circumvention by URLs on the same VHost
This commit is contained in:
lippserd 2018-01-18 09:58:32 +01:00 committed by GitHub
commit 362a5b1721
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -16,7 +16,7 @@ class InternalUrlValidator extends Zend_Validate_Abstract
*/
public function isValid($value)
{
if (Url::fromPath($value)->isExternal()) {
if (Url::fromPath($value)->getRelativeUrl() === '') {
$this->_error('IS_EXTERNAL');
return false;