InternalUrlValidator: prevent circumvention by URLs on the same VHost

2018-01-16 15:40:08 +01:00 · 2018-01-16 15:40:08 +01:00 · c2f74d49cb
parent e381b1e439
commit c2f74d49cb
1 changed files with 1 additions and 1 deletions
--- a/library/Icinga/Web/Form/Validator/InternalUrlValidator.php
+++ b/library/Icinga/Web/Form/Validator/InternalUrlValidator.php
@ -16,7 +16,7 @@ class InternalUrlValidator extends Zend_Validate_Abstract
     */
    public function isValid($value)
    {
-        if (Url::fromPath($value)->isExternal()) {
+        if (Url::fromPath($value)->getRelativeUrl() === '') {
            $this->_error('IS_EXTERNAL');

            return false;