fix(url): disallowed wonky path (#4386)

2025-07-30 21:30:14 +02:00 · 2025-01-03 05:40:30 +01:00
parent c44a76ff17
commit be51ba17df
3 changed files with 10 additions and 3 deletions
--- a/lib/url.php
+++ b/lib/url.php
@@ -111,6 +111,9 @@ final class Url
        if (!str_starts_with($path, '/')) {
            throw new UrlException(sprintf('Path must start with forward slash: %s', $path));
        }
+        if (str_starts_with($path, '//')) {
+            throw new UrlException(sprintf('Illegal path (too many forward slashes): %s', $path));
+        }
        $clone = clone $this;
        $clone->path = $path;
        return $clone;