Fix #1349 relative path issue in action

Detect if action URL in the form is relative and format it properly
ampproject · Aug 22, 2018 · fae8ab9 · fae8ab9
1 parent 274971c
commit fae8ab9
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/includes/sanitizers/class-amp-form-sanitizer.php b/includes/sanitizers/class-amp-form-sanitizer.php
@@ -67,6 +67,11 @@ public function sanitize() {
 				$action_url = esc_url_raw( '//' . $_SERVER['HTTP_HOST'] . wp_unslash( $_SERVER['REQUEST_URI'] ) ); // WPCS: ignore. input var okay, sanitization ok.
 			} else {
 				$action_url = $node->getAttribute( 'action' );
+				//check if action_url is a relative path and add the host to it
+				preg_match('(^\/?[^\/].*)',$action_url,$matches);
+				if ($matches){
+					$action_url = '//' . $_SERVER['HTTP_HOST'] . $action_url;
+				}
 			}
 			$xhr_action = $node->getAttribute( 'action-xhr' );