Bug #16537

tslib_content typolink does not check if url is vaild scheme

Added by Ingo Schmitt over 6 years ago. Updated 20 days ago.

Status:Needs Feedback Start date:2006-09-07
Priority:Should have Due date:
Assignee:- % Done:

0%
Category:-
Target version:-
TYPO3 Version:4.0 Complexity:
PHP Version:
Votes: 0

Description

In line 5085 in tslib_content $link_param parsed by the php method parse_url. If the parameter is no valid url, an php_warning is given.
Possible solution: add an @ bevore (bad)
Possible solution: Check if $link_param is a valid url

PHP Warning:  parse_url(http:///www.houseandmore.de/) [<a href='function.parse-url'>function.parse-url</a>]: Unable to parse url in ....heimwerker/typo3_src-4.0/typo3/sysext/cms/tslib/class.tslib_content.php on line 5085

(issue imported from #M4173)

History

#1
Updated by Wolfgang Klinger over 6 years ago

a similar problem happens in

t3lib/class.t3lib_page.php
method getExtURL

if no URL is given:

Warning: parse_url(http://): Unable to parse url in /var/www/myinst/typo3_src-4.0.1/t3lib/class.t3lib_page.php on line 666

#2
Updated by HO Thi almost 6 years ago

For Typo3 4.1.1 :

PHP Warning: parse_url(http://javascript:linkTo_UnCryptMailto('nbjmup+kfbo.ebojfm/evcpjtAwe/di');) [<a href='function.parse-url'>function.parse-url</a>]: Unable to parse url in typo3_src-4.1.1/typo3/sysext/cms/tslib/class.tslib_content.php on line 5093

#3
Updated by Alexander Opitz 20 days ago

  • Status changed from New to Needs Feedback
  • Target version deleted (0)
  • PHP Version deleted (4)

The issue is very old, does this issue exists in newer versions of TYPO3 CMS (4.5 or 6.1)?

Also available in: Atom PDF