Mirrors/Part-DB-server
2
0
Fork 0
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2026-03-16 12:18:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Make GenericWebProvider more forgiving with URLs and accept the "fixed" strings traefik provides as security measure

Browse Source 
This fixes issue #1296
This commit is contained in:
Jan Böhmer
2026-03-15 18:55:16 +01:00
parent baeef1228a
commit de371877b9
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/Services/InfoProviderSystem/Providers/GenericWebProvider.php
View File

@@ -315,7 +315,14 @@ class GenericWebProvider implements InfoProviderInterface
//Remove any leading slashes
$url = ltrim($url, '/');
$url = 'https://'.$url;
//If the URL starts with https:/ or http:/, add the missing slash
//Traefik removes the double slash as secruity measure, so we want to be forgiving and add it back if needed
//See https://github.com/Part-DB/Part-DB-server/issues/1296
if (preg_match('/^https?:\/[^\/]/', $url)) {
$url = preg_replace('/^(https?:)\/([^\/])/', '$1//$2', $url);
} else {
$url = 'https://'.$url;
}
}
//If this is not a valid URL with host, domain and path, throw an exception