5950693fb3
Related to https://github.com/phpmyadmin/phpmyadmin/pull/17427. Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
60 lines
1.8 KiB
PHP
60 lines
1.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace PhpMyAdmin;
|
|
|
|
use function __;
|
|
use function is_scalar;
|
|
use function preg_match;
|
|
use function strlen;
|
|
|
|
/**
|
|
* URL redirector to avoid leaking Referer with some sensitive information.
|
|
*/
|
|
final class UrlRedirector
|
|
{
|
|
/**
|
|
* @psalm-return never
|
|
*/
|
|
public static function redirect(): void
|
|
{
|
|
$GLOBALS['containerBuilder'] = $GLOBALS['containerBuilder'] ?? null;
|
|
|
|
// Load database service because services.php is not available here
|
|
$GLOBALS['dbi'] = DatabaseInterface::load();
|
|
$GLOBALS['containerBuilder']->set(DatabaseInterface::class, $GLOBALS['dbi']);
|
|
|
|
// Only output the http headers
|
|
$response = ResponseRenderer::getInstance();
|
|
$response->getHeader()->sendHttpHeaders();
|
|
$response->disable();
|
|
|
|
if (
|
|
! isset($_GET['url']) || ! is_scalar($_GET['url']) || strlen((string) $_GET['url']) === 0
|
|
|| ! preg_match('/^https:\/\/[^\n\r]*$/', (string) $_GET['url'])
|
|
|| ! Core::isAllowedDomain((string) $_GET['url'])
|
|
) {
|
|
Core::sendHeaderLocation('./');
|
|
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* JavaScript redirection is necessary. Because if header() is used then web browser sometimes does not change
|
|
* the HTTP_REFERER field and so with old URL as Referer, token also goes to external site.
|
|
*
|
|
* @var Template $template
|
|
*/
|
|
$template = $GLOBALS['containerBuilder']->get('template');
|
|
echo $template->render('javascript/redirect', [
|
|
'url' => Sanitize::escapeJsString((string) $_GET['url']),
|
|
]);
|
|
// Display redirecting msg on screen.
|
|
// Do not display the value of $_GET['url'] to avoid showing injected content
|
|
echo __('Taking you to the target site.');
|
|
|
|
exit;
|
|
}
|
|
}
|
