fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-08 11:11:39 +09:00
Code Issues Projects Releases Packages Wiki Activity

Fix #1993 allow mailto: tel: and other valid link formats in menu shortcut target

Browse source
This commit is contained in:
Kijin Sung 2022-10-11 01:27:48 +09:00
parent 24756fc08d
commit 86fd823264
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/menu/menu.admin.controller.php
View file

@ -501,7 +501,7 @@ class menuAdminController extends menu
$oDB->begin(); $oDB->begin();
// type is url // type is url
if(strncasecmp('http', $request->shortcut_target, 4) === 0 || preg_match('/^(\.\/|\.\.\/|\/).*$/', $request->shortcut_target)) if (preg_match('!^([a-z]+:(//|[a-z0-9_-])|\.{0,2}/)!i', $request->shortcut_target))
{ {
// set menu variable // set menu variable
$args = new stdClass(); $args = new stdClass();
@ -712,7 +712,7 @@ class menuAdminController extends menu
if($itemInfo->is_shortcut == 'Y') if($itemInfo->is_shortcut == 'Y')
{ {
// type is url // type is url
if(strncasecmp('http', $request->shortcut_target, 4) === 0 || preg_match('/^(\.\/|\.\.\/|\/).*$/', $request->shortcut_target)) if (preg_match('!^([a-z]+:(//|[a-z0-9_-])|\.{0,2}/)!i', $request->shortcut_target))
{ {
$args->url = $request->shortcut_target; $args->url = $request->shortcut_target;
} }