Bug #82054 ยป 82054.diff
typo3/sysext/fluid/Classes/ViewHelpers/Link/ExternalViewHelper.php | ||
---|---|---|
$uri = $this->arguments['uri'];
|
||
$defaultScheme = $this->arguments['defaultScheme'];
|
||
// Disallow direct javascript: or data: links
|
||
list($prefix, $_) = explode(':', $uri, 2);
|
||
if (in_array(strtolower(trim($prefix)), ['javascript', 'data'], true)) {
|
||
return $this->renderChildren();
|
||
}
|
||
$scheme = parse_url($uri, PHP_URL_SCHEME);
|
||
if ($scheme === null && $defaultScheme !== '') {
|
||
$uri = $defaultScheme . '://' . $uri;
|