From: Frédéric Buclin <LpSolit@gmail.com>
Date: Wed, 7 Jan 2015 13:36:59 +0000 (+0100)
Subject: Bug 1114395: Markdown only accepts the http and https protocols
X-Git-Tag: release-5.1.1~401
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4eb270e4ea780ca79027c8264db4e64ac56f2bba;p=thirdparty%2Fbugzilla.git

Bug 1114395: Markdown only accepts the http and https protocols
r/a=glob
---

diff --git a/Bugzilla/Markdown.pm b/Bugzilla/Markdown.pm
index 353c2ff6ae..ed56080258 100644
--- a/Bugzilla/Markdown.pm
+++ b/Bugzilla/Markdown.pm
@@ -230,8 +230,8 @@ sub _DoAnchors {
             $url =~ s@</a$@@;
         }
 
-        # Limit URL to HTTP/HTTPS links
-        $url = "http://$url" unless $url =~ m!^https?://!i;
+        my $safe_url_regexp = Bugzilla::Template::SAFE_URL_REGEXP();
+        $url = "http://$url" unless $url =~ /^$safe_url_regexp$/;
 
         $self->_GenerateAnchor($whole_match, $link_text, undef, $url, $title);
     }xsge;