Skip to content
Snippets Groups Projects
Commit b815965d authored by Jaime Perez Crespo's avatar Jaime Perez Crespo
Browse files

Fix another issue with URLs not being validated before displaying them into a...

Fix another issue with URLs not being validated before displaying them into a page. Reported by John Page (hyp3rlinx).
parent d0141899
Branches
Tags
No related merge requests found
......@@ -5,8 +5,7 @@ require_once('_include.php');
$config = SimpleSAML_Configuration::getInstance();
if (array_key_exists('link_href', $_REQUEST)) {
$link = (string) $_REQUEST['link_href'];
$link = \SimpleSAML\Utils\HTTP::normalizeURL($link);
$link = \SimpleSAML\Utils\HTTP::checkURLAllowed($_REQUEST['link_href']);
} else {
$link = 'index.php';
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment