Bug #82054 ยป 82054.diff
| typo3/sysext/fluid/Classes/ViewHelpers/Link/ExternalViewHelper.php | ||
|---|---|---|
|
$uri = $this->arguments['uri'];
|
||
|
$defaultScheme = $this->arguments['defaultScheme'];
|
||
|
// Disallow direct javascript: or data: links
|
||
|
list($prefix, $_) = explode(':', $uri, 2);
|
||
|
if (in_array(strtolower(trim($prefix)), ['javascript', 'data'], true)) {
|
||
|
return $this->renderChildren();
|
||
|
}
|
||
|
$scheme = parse_url($uri, PHP_URL_SCHEME);
|
||
|
if ($scheme === null && $defaultScheme !== '') {
|
||
|
$uri = $defaultScheme . '://' . $uri;
|
||