diff options
Diffstat (limited to 'include/functions.php')
| -rw-r--r-- | include/functions.php | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/include/functions.php b/include/functions.php index 63b717701..19eac41ae 100644 --- a/include/functions.php +++ b/include/functions.php @@ -1941,9 +1941,15 @@ if (!$tokens['host']) return false; + if (!in_array($tokens['port'], [80, 443, ''])) + return false; + if (!in_array($tokens['scheme'], ['http', 'https'])) return false; + if ($tokens['host'] == 'localhost' || $tokens['host'] == '::1' || strpos($tokens['host'], '127.') === 0) + return false; + //convert IDNA hostname to punycode if possible if (function_exists("idn_to_ascii")) { if (mb_detect_encoding($tokens['host']) != 'ASCII') { @@ -1952,8 +1958,5 @@ } } - /* if ($tokens['host'] == 'localhost' || $tokens['host'] == '127.0.0.1') - return false; */ - return $url; } |