From 260729fd7dbc0b81d1966d60f8bd413bdf62f683 Mon Sep 17 00:00:00 2001
From: Lukas Reschke <lukas@owncloud.org>
Date: Sun, 27 Jul 2014 16:46:32 +0200
Subject: [PATCH] Verify whether the URL is valid
Required for https://github.com/owncloud/mail/pull/100#issuecomment-50266017
@karlitschek Backport for stable6 and stable7 requested.
---
lib/private/util.php | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/lib/private/util.php b/lib/private/util.php
index eea194288f..67da7a2f63 100755
--- a/lib/private/util.php
+++ b/lib/private/util.php
@@ -1217,11 +1217,16 @@ class OC_Util {
/**
* @Brief Get file content via curl.
* @param string $url Url to get content
+ * @throws Exception If the URL does not start with http:// or https://
* @return string of the response or false on error
* This function get the content of a page via curl, if curl is enabled.
* If not, file_get_contents is used.
*/
public static function getUrlContent($url) {
+ if (strpos($url, 'http://') !== 0 && strpos($url, 'https://') !== 0) {
+ throw new Exception('$url must start with https:// or http://', 1);
+ }
+
if (function_exists('curl_init')) {
$curl = curl_init();
$max_redirects = 10;
--
GitLab