tyler.durden/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2025-07-28 16:24:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3271 from Icinga/bugfix/fix-internalurlvalidator

Browse Source 
InternalUrlValidator: prevent circumvention by URLs on the same VHost
This commit is contained in:
lippserd 2018-01-18 09:58:32 +01:00 committed by GitHub
commit 362a5b1721
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
library/Icinga/Web/Form/Validator/InternalUrlValidator.php
View File

@ -16,7 +16,7 @@ class InternalUrlValidator extends Zend_Validate_Abstract
*/ */
public function isValid($value) public function isValid($value)
{ {
if (Url::fromPath($value)->isExternal()) { if (Url::fromPath($value)->getRelativeUrl() === '') {
$this->_error('IS_EXTERNAL'); $this->_error('IS_EXTERNAL');
return false; return false;