From f8ee98c60d517451419faf09ac946c66694be3c5 Mon Sep 17 00:00:00 2001 From: Marcel Werk Date: Wed, 13 Jul 2016 17:13:16 +0200 Subject: [PATCH] Fixed handling of invalid urls --- wcfsetup/install/files/lib/util/HTTPRequest.class.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/wcfsetup/install/files/lib/util/HTTPRequest.class.php b/wcfsetup/install/files/lib/util/HTTPRequest.class.php index 7c239438d6..3ac741b96c 100644 --- a/wcfsetup/install/files/lib/util/HTTPRequest.class.php +++ b/wcfsetup/install/files/lib/util/HTTPRequest.class.php @@ -217,6 +217,9 @@ final class HTTPRequest { */ private function setURL($url) { $parsedUrl = $originUrl = parse_url($url); + if (empty($originUrl['scheme']) || empty($originUrl['host'])) { + throw new SystemException("Invalid URL '{$url}' given"); + } $this->originUseSSL = $originUrl['scheme'] === 'https'; $this->originHost = $originUrl['host']; -- 2.20.1