groove/Part-DB-server
1
0
Fork 0
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2026-03-17 20:59:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Make GenericWebProvider more forgiving with URLs and accept the "fixed" strings traefik provides as security measure

Browse source 
This fixes issue #1296
This commit is contained in:
Jan Böhmer 2026-03-15 18:55:16 +01:00
parent baeef1228a
commit de371877b9
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/Services/InfoProviderSystem/Providers/GenericWebProvider.php
View file

@ -315,7 +315,14 @@ class GenericWebProvider implements InfoProviderInterface
//Remove any leading slashes //Remove any leading slashes
$url = ltrim($url, '/'); $url = ltrim($url, '/');
$url = 'https://'.$url; //If the URL starts with https:/ or http:/, add the missing slash
//Traefik removes the double slash as secruity measure, so we want to be forgiving and add it back if needed
//See https://github.com/Part-DB/Part-DB-server/issues/1296
if (preg_match('/^https?:\/[^\/]/', $url)) {
$url = preg_replace('/^(https?:)\/([^\/])/', '$1//$2', $url);
} else {
$url = 'https://'.$url;
}
} }
//If this is not a valid URL with host, domain and path, throw an exception //If this is not a valid URL with host, domain and path, throw an exception