rewrite_relative_url: validate resulting absolutized URLs

1 files changed, 3 insertions, 3 deletions

diff --git a/include/functions.php b/include/functions.php
index 19eac41ae..9aecaecb4 100644
--- a/include/functions.php
+++ b/include/functions.php
@@ -1526,10 +1526,10 @@
 		$rel_parts = parse_url($rel_url);
 
 		if ($rel_parts['host'] && $rel_parts['scheme']) {
-			return $rel_url;
+			return validate_url($rel_url);
 		} else if (strpos($rel_url, "//") === 0) {
 			# protocol-relative URL (rare but they exist)
-			return "https:" . $rel_url;
+			return validate_url("https:" . $rel_url);
 		} else if (strpos($rel_url, "magnet:") === 0) {
 			# allow magnet links
 			return $rel_url;
@@ -1552,7 +1552,7 @@
 			$parts['path'] = str_replace("/./", "/", $parts['path']);
 			$parts['path'] = str_replace("//", "/", $parts['path']);
 
-			return build_url($parts);
+			return validate_url(build_url($parts));
 		}
 	}