GNUsocial/gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

bad validation of callback URL

Browse Source 
darcs-hash:20080605040358-84dde-b2018db43791d1cbed722d3320cd0b62d6da94eb.gz
This commit is contained in:
Evan Prodromou 2008-06-05 00:03:58 -04:00
parent 24ff61d159
commit 356f401986
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
actions/userauthorization.php
View File

@ -408,7 +408,7 @@ class UserauthorizationAction extends Action {
throw new OAuthException("Invalid avatar '$avatar'"); throw new OAuthException("Invalid avatar '$avatar'");
} }
$callback = $req->get_parameter('oauth_callback'); $callback = $req->get_parameter('oauth_callback');
if ($avatar && common_valid_http_url($callback)) { if ($callback && !common_valid_http_url($callback)) {
throw new OAuthException("Invalid callback URL '$callback'"); throw new OAuthException("Invalid callback URL '$callback'");
} }
} }