MDL-9734 fix for clean_param PARAM_LOCALURL bug
This commit is contained in:
+1
-1
@@ -484,7 +484,7 @@ function clean_param($param, $type) {
|
||||
return $param;
|
||||
|
||||
case PARAM_LOCALURL: // allow http absolute, root relative and relative URLs within wwwroot
|
||||
clean_param($param, PARAM_URL);
|
||||
$param = clean_param($param, PARAM_URL);
|
||||
if (!empty($param)) {
|
||||
if (preg_match(':^/:', $param)) {
|
||||
// root-relative, ok!
|
||||
|
||||
Reference in New Issue
Block a user