Consistently use new domain system for URL::isInternalUrl() and checkCSRF()

This commit is contained in:
Kijin Sung 2017-03-04 22:09:45 +09:00
parent f1608ad3a9
commit af7309b807
3 changed files with 6 additions and 23 deletions

View file

@ -310,10 +310,10 @@ class Security
if (!$referer)
{
$referer = strval($_SERVER['HTTP_REFERER']);
if ($referer === '')
{
return true;
}
}
if (strval($referer) === '')
{
return true;
}
return URL::isInternalURL($referer);