Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/matomo-org/matomo.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'plugins/Proxy')
-rw-r--r--plugins/Proxy/Controller.php6
1 files changed, 6 insertions, 0 deletions
diff --git a/plugins/Proxy/Controller.php b/plugins/Proxy/Controller.php
index 3db935bf8a..b1af775d80 100644
--- a/plugins/Proxy/Controller.php
+++ b/plugins/Proxy/Controller.php
@@ -154,6 +154,12 @@ class Piwik_Proxy_Controller extends Piwik_Controller
*/
static public function isPiwikUrl($url)
{
+ // guard for IE6 meta refresh parsing weakness (OSVDB 19029)
+ if(strpos($url, ';') !== false
+ || strpos($url, '&#59') !== false)
+ {
+ return false;
+ }
if(preg_match('~^http://(qa\.|demo\.|dev\.|forum\.)?piwik.org([#?/]|$)~', $url))
{
return true;