Fix for user reported CVE path-based open redirect

2026-05-13 02:06:18 +02:00 · 2020-03-18 17:32:46 -06:00
parent 6f2be2a2d2
commit 2eae104c7a
2 changed files with 5 additions and 1 deletions
--- a/system/src/Grav/Common/Grav.php
+++ b/system/src/Grav/Common/Grav.php
@@ -316,7 +316,10 @@ class Grav extends Container
        /** @var Uri $uri */
        $uri = $this['uri'];

-        //Check for code in route
+        // Clean route for redirect
+        $route = preg_replace("#^\/[\\\/]+\/#", '/', $route);
+
+         // Check for code in route
        $regex = '/.*(\[(30[1-7])\])$/';
        preg_match($regex, $route, $matches);
        if ($matches) {