From c6a05031b8f9e15dc58575517033fdc4016573cd Mon Sep 17 00:00:00 2001
From: Johannes Meyer <johannes.meyer@icinga.com>
Date: Thu, 1 Dec 2022 15:50:46 +0100
Subject: [PATCH] InternalUrlValidator: Also check the scheme

(cherry picked from commit 3187a4e549af978d428ddd9b05ccee7b5766e39e)
---
 library/Icinga/Web/Form/Validator/InternalUrlValidator.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/library/Icinga/Web/Form/Validator/InternalUrlValidator.php b/library/Icinga/Web/Form/Validator/InternalUrlValidator.php
index 424e77ff8..d9f344062 100644
--- a/library/Icinga/Web/Form/Validator/InternalUrlValidator.php
+++ b/library/Icinga/Web/Form/Validator/InternalUrlValidator.php
@@ -3,6 +3,7 @@
 
 namespace Icinga\Web\Form\Validator;
 
+use Icinga\Application\Icinga;
 use Zend_Validate_Abstract;
 use Icinga\Web\Url;
 
@@ -16,7 +17,8 @@ class InternalUrlValidator extends Zend_Validate_Abstract
      */
     public function isValid($value)
     {
-        if (Url::fromPath($value)->getRelativeUrl() === '') {
+        $url = Url::fromPath($value);
+        if ($url->getRelativeUrl() === '' || $url->getScheme() !== Icinga::app()->getRequest()->getScheme()) {
             $this->_error('IS_EXTERNAL');
 
             return false;