eduvpn /
vpn-lib-common
| @@ 53-55 (lines=3) @@ | ||
| 50 | $redirectTo = $request->getPostParameter('_form_auth_redirect_to'); |
|
| 51 | ||
| 52 | // validate the URL |
|
| 53 | if (false === filter_var($redirectTo, FILTER_VALIDATE_URL, FILTER_FLAG_SCHEME_REQUIRED | FILTER_FLAG_HOST_REQUIRED | FILTER_FLAG_PATH_REQUIRED)) { |
|
| 54 | throw new HttpException('invalid redirect_to URL', 400); |
|
| 55 | } |
|
| 56 | // extract the "host" part of the URL |
|
| 57 | if (false === $redirectToHost = parse_url($redirectTo, PHP_URL_HOST)) { |
|
| 58 | throw new HttpException('invalid redirect_to URL, unable to extract host', 400); |
|
| @@ 39-41 (lines=3) @@ | ||
| 36 | if (!in_array($request->getRequestMethod(), $safeMethods)) { |
|
| 37 | $referrer = $request->getHeader('HTTP_REFERER'); |
|
| 38 | // validate the URL |
|
| 39 | if (false === filter_var($referrer, FILTER_VALIDATE_URL, FILTER_FLAG_SCHEME_REQUIRED | FILTER_FLAG_HOST_REQUIRED | FILTER_FLAG_PATH_REQUIRED)) { |
|
| 40 | throw new HttpException('invalid HTTP_REFERER', 400); |
|
| 41 | } |
|
| 42 | // extract the "host" part of the URL |
|
| 43 | if (false === $referrerHost = parse_url($referrer, PHP_URL_HOST)) { |
|
| 44 | throw new HttpException('invalid HTTP_REFERER, unable to extract host', 400); |
|
| @@ 60-62 (lines=3) @@ | ||
| 57 | } |
|
| 58 | ||
| 59 | // validate the URL |
|
| 60 | if (false === filter_var($redirectTo, FILTER_VALIDATE_URL, FILTER_FLAG_SCHEME_REQUIRED | FILTER_FLAG_HOST_REQUIRED | FILTER_FLAG_PATH_REQUIRED)) { |
|
| 61 | throw new HttpException('invalid redirect_to URL', 400); |
|
| 62 | } |
|
| 63 | ||
| 64 | // extract the "host" part of the URL |
|
| 65 | if (false === $redirectToHost = parse_url($redirectTo, PHP_URL_HOST)) { |
|
