blob: c7411c95674597869202b6719188ed801d1a2b2e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
<?php
declare(strict_types=1);
namespace PhpMyAdmin;
use function __;
use function is_scalar;
use function preg_match;
use function strlen;
/**
* URL redirector to avoid leaking Referer with some sensitive information.
*/
final class UrlRedirector
{
/**
* @psalm-return never
*/
public static function redirect(): void
{
$GLOBALS['containerBuilder'] = $GLOBALS['containerBuilder'] ?? null;
// Load database service because services.php is not available here
$GLOBALS['dbi'] = DatabaseInterface::load();
$GLOBALS['containerBuilder']->set(DatabaseInterface::class, $GLOBALS['dbi']);
// Only output the http headers
$response = ResponseRenderer::getInstance();
$response->getHeader()->sendHttpHeaders();
$response->disable();
if (
! isset($_GET['url']) || ! is_scalar($_GET['url']) || strlen((string) $_GET['url']) === 0
|| ! preg_match('/^https:\/\/[^\n\r]*$/', (string) $_GET['url'])
|| ! Core::isAllowedDomain((string) $_GET['url'])
) {
Core::sendHeaderLocation('./');
exit;
}
/**
* JavaScript redirection is necessary. Because if header() is used then web browser sometimes does not change
* the HTTP_REFERER field and so with old URL as Referer, token also goes to external site.
*
* @var Template $template
*/
$template = $GLOBALS['containerBuilder']->get('template');
echo $template->render('javascript/redirect', [
'url' => Sanitize::escapeJsString((string) $_GET['url']),
]);
// Display redirecting msg on screen.
// Do not display the value of $_GET['url'] to avoid showing injected content
echo __('Taking you to the target site.');
exit;
}
}
|
