Url within menu entry could be used to execude javascript #1138

Admidio · Dec 21, 2021 · 56a0bdc · 56a0bdc
1 parent 470f534
commit 56a0bdc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/adm_program/modules/menu/menu_function.php b/adm_program/modules/menu/menu_function.php
@@ -49,7 +49,7 @@
     $postComId    = admFuncVariableIsValid($_POST, 'men_com_id',        'int');
     $postName     = admFuncVariableIsValid($_POST, 'men_name',          'string', array('default' => ''));
     $postDesc     = admFuncVariableIsValid($_POST, 'men_description',   'string', array('default' => ''));
-    $postUrl      = admFuncVariableIsValid($_POST, 'men_url',           'string', array('default' => ''));
+    $postUrl      = admFuncVariableIsValid($_POST, 'men_url',           'url',    array('default' => ''));
     $postIcon     = admFuncVariableIsValid($_POST, 'men_icon',          'string', array('default' => ''));
 
     // within standard menu items the url should not be changed