Merge pull request #3271 from Icinga/bugfix/fix-internalurlvalidator
InternalUrlValidator: prevent circumvention by URLs on the same VHost
This commit is contained in:
commit
362a5b1721
|
@ -16,7 +16,7 @@ class InternalUrlValidator extends Zend_Validate_Abstract
|
|||
*/
|
||||
public function isValid($value)
|
||||
{
|
||||
if (Url::fromPath($value)->isExternal()) {
|
||||
if (Url::fromPath($value)->getRelativeUrl() === '') {
|
||||
$this->_error('IS_EXTERNAL');
|
||||
|
||||
return false;
|
||||
|
|
Loading…
Reference in New Issue