]> _ Git - cubeextranet.git/commitdiff
wait #4966 @0:05
authorvincent@cubedesigners.com <vincent@cubedesigners.com@f5622870-0f3c-0410-866d-9cb505b7a8ef>
Wed, 22 Dec 2021 16:46:10 +0000 (16:46 +0000)
committervincent@cubedesigners.com <vincent@cubedesigners.com@f5622870-0f3c-0410-866d-9cb505b7a8ef>
Wed, 22 Dec 2021 16:46:10 +0000 (16:46 +0000)
inc/ws/Util/html5/master/class.ws.html5.links.php

index 537b01d981e0cf9b9339c1da9ad31a3af838120b..6b2e58b8289dea7c94fbeb7f226da65e8754d7a8 100644 (file)
@@ -673,7 +673,7 @@ class wsHTML5Link
     {
         $datas = parse_url($loc);
 
-        if ((isset($datas['scheme']) && !is_null($datas['scheme'])) || strpos($loc, '#') === 0) {
+        if ((isset($datas['scheme']) && !is_null($datas['scheme'])) || strpos($loc, '#') === 0 || strpos($loc, "../") === 0) {
 
             return $loc;
         } else {