Adding hexadecimal check for parse_rul

see https://github.com/friendica/friendica/issues/6917#issuecomment-475461338
This commit is contained in:
Philipp Holzer 2019-05-29 20:32:16 +02:00
parent 3de540d1d1
commit 392137b433
No known key found for this signature in database
GPG Key ID: D8365C3D36B77D90
1 changed files with 7 additions and 2 deletions

View File

@ -9,12 +9,14 @@
*
* @see ParseUrl::getSiteinfo() for more information about scraping embeddable content
*/
use Friendica\App;
use Friendica\Core\Hook;
use Friendica\Core\Logger;
use Friendica\Core\System;
use Friendica\Util\Network;
use Friendica\Util\ParseUrl;
use Friendica\Util\Strings;
function parse_url_content(App $a)
{
@ -25,10 +27,13 @@ function parse_url_content(App $a)
$br = "\n";
if (!empty($_GET['binurl'])) {
if (!empty($_GET['binurl']) && Strings::isHex($_GET['binurl'])) {
$url = trim(hex2bin($_GET['binurl']));
} else {
} elseif (!empty($_GET['url'])) {
$url = trim($_GET['url']);
// fallback in case no url is valid
} else {
$a->internalRedirect();
}
if (!empty($_GET['title'])) {