From: vincent@cubedesigners.com <vincent@cubedesigners.com@f5622870-0f3c-0410-866d-9cb505b7a8ef>
Date: Wed, 22 Dec 2021 16:46:10 +0000 (+0000)
Subject: wait #4966 @0:05
X-Git-Url: http://git.cubedesigners.com/?a=commitdiff_plain;h=7e1bf5ad195d4cb6b31e5d2d748f340ce40f6991;p=cubeextranet.git

wait #4966 @0:05
---

diff --git a/inc/ws/Util/html5/master/class.ws.html5.links.php b/inc/ws/Util/html5/master/class.ws.html5.links.php
index 537b01d98..6b2e58b82 100644
--- a/inc/ws/Util/html5/master/class.ws.html5.links.php
+++ b/inc/ws/Util/html5/master/class.ws.html5.links.php
@@ -673,7 +673,7 @@ class wsHTML5Link
     {
         $datas = parse_url($loc);
 
-        if ((isset($datas['scheme']) && !is_null($datas['scheme'])) || strpos($loc, '#') === 0) {
+        if ((isset($datas['scheme']) && !is_null($datas['scheme'])) || strpos($loc, '#') === 0 || strpos($loc, "../") === 0) {
 
             return $loc;
         } else {