Skip to content
Snippets Groups Projects
Commit a2d0e385 authored by Oliver Hader's avatar Oliver Hader Committed by Christian Kuhn
Browse files

[BUGFIX] Avoid exceptions due to non-HTTP URI values in CSP reporter

CSP violation reports might contain non-HTTP referrer URIs, like
`android-app://com.google.android.googlequicksearchbox/`, which
results in an exception, since the `android-app:` scheme is not
supported by the model in `\TYPO3\CMS\Core\Http\Uri`.

This change introduces the `Uri::fromAnyScheme()` factory method,
which instructs the parsing logic to skip the scheme validation.

Resolves: #103935
Releases: main, 12.4
Change-Id: I45cad34a797d098e439a1c6fb80945948bf02e34
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85518


Tested-by: default avatarcore-ci <typo3@b13.com>
Tested-by: default avatarChristian Kuhn <lolli@schwarzbu.ch>
Reviewed-by: default avatarChristian Kuhn <lolli@schwarzbu.ch>
parent 365480f3
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment