Skip to content

[5.x] Add additional URL::isExternalToApplication() tests#14288

Merged
jasonvarga merged 2 commits into5.xfrom
is-external-url-5.x
Mar 18, 2026
Merged

[5.x] Add additional URL::isExternalToApplication() tests#14288
jasonvarga merged 2 commits into5.xfrom
is-external-url-5.x

Conversation

@duncanmcclean
Copy link
Member

@duncanmcclean duncanmcclean commented Mar 18, 2026

This pull request adds additional test cases to the ProvidesExternalUrls trait to protect against URL credential injection.

The issue only affects the implementation on6.x, but I thought it was worth adding tests to 5.x just to be sure.

Related: #14287

@jasonvarga jasonvarga changed the title [5.x] Harden URL::isExternalToApplication() [5.x] Add additional URL::isExternalToApplication() tests Mar 18, 2026
@jasonvarga jasonvarga merged commit 27105a1 into 5.x Mar 18, 2026
51 checks passed
@jasonvarga jasonvarga deleted the is-external-url-5.x branch March 18, 2026 16:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants