Fix open redirect issue with partial URLs

Alanaktion · Mar 12, 2022 · c9c95fe · c9c95fe
1 parent 3cdfb4c
commit c9c95fe
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/controller/index.php b/app/controller/index.php
@@ -50,7 +50,7 @@ public function login($f3)
             if (!$f3->get("GET.to")) {
                 $f3->reroute("/");
             } else {
-                if (strpos($f3->get("GET.to"), "://") === false) {
+                if (strpos($f3->get("GET.to"), "://") === false || substr($f3->get("GET.to"), 0, 2) == "//") {
                     $f3->reroute($f3->get("GET.to"));
                 } else {
                     $f3->reroute("/");
@@ -93,7 +93,7 @@ public function loginpost($f3)
                 if (!$f3->get("POST.to")) {
                     $f3->reroute("/");
                 } else {
-                    if (strpos($f3->get("POST.to"), "://") === false) {
+                    if (strpos($f3->get("POST.to"), "://") === false || substr($f3->get("POST.to"), 0, 2) == "//") {
                         $f3->reroute($f3->get("POST.to"));
                     } else {
                         $f3->reroute("/");