mirror/FreshRSS
0
0
Fork 0
mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-05-24 16:25:00 -04:00
Code Issues Packages Projects Releases Wiki Activity

Sanitize Web site URL

Browse Source 
https://github.com/FreshRSS/FreshRSS/issues/1434
This commit is contained in:
Alexandre Alapetite
2017-02-25 11:51:54 +01:00
parent b8ac2b1d8a
commit 8a6b381154
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/Controllers/subscriptionController.php
View File

@@ -90,8 +90,8 @@ class FreshRSS_subscription_Controller extends Minz_ActionController {
$values = array(
'name' => Minz_Request::param('name', ''),
'description' => sanitizeHTML(Minz_Request::param('description', '', true)),
'website' => Minz_Request::param('website', ''),
'url' => Minz_Request::param('url', ''),
'website' => checkUrl(Minz_Request::param('website', '')),
'url' => checkUrl(Minz_Request::param('url', '')),
'category' => $cat,
'pathEntries' => Minz_Request::param('path_entries', ''),
'priority' => intval(Minz_Request::param('priority', 0)),

4
lib/lib_rss.php
View File

@@ -69,10 +69,10 @@ function idn_to_puny($url) {
}
function checkUrl($url) {
if (empty ($url)) {
if ($url == '') {
return '';
}
if (!preg_match ('#^https?://#i', $url)) {
if (!preg_match('#^https?://#i', $url)) {
$url = 'http://' . $url;
}
$url = idn_to_puny($url); //PHP bug #53474 IDN