From 45d70ef57f8b9296563fb17e601a332253a4fc8f Mon Sep 17 00:00:00 2001 From: Coleman Watts Date: Mon, 20 Aug 2018 17:52:57 -0400 Subject: [PATCH] Navigation - Don't reprocess fully-formed urls --- CRM/Core/BAO/Navigation.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/CRM/Core/BAO/Navigation.php b/CRM/Core/BAO/Navigation.php index 1637c14dff..e08778fc8b 100644 --- a/CRM/Core/BAO/Navigation.php +++ b/CRM/Core/BAO/Navigation.php @@ -493,8 +493,9 @@ FROM civicrm_navigation WHERE domain_id = $domainID"; $config = CRM_Core_Config::singleton(); $makeLink = FALSE; - if (isset($url) && $url) { - if (substr($url, 0, 4) !== 'http') { + if (!empty($url)) { + // Skip processing fully-formed urls + if (substr($url, 0, 4) !== 'http' && $url[0] !== '/') { //CRM-7656 --make sure to separate out url path from url params, //as we'r going to validate url path across cross-site scripting. $parsedUrl = parse_url($url); -- 2.25.1