From ba35a1c8d0dba0c964d073767ad5945bbd3c942f Mon Sep 17 00:00:00 2001 From: Daniel Winzen Date: Fri, 15 Jul 2016 17:56:41 +0200 Subject: [PATCH] Don't hotlink schema links without protocol. --- chat.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/chat.php b/chat.php index ac14a16..b1e9334 100644 --- a/chat.php +++ b/chat.php @@ -2888,7 +2888,7 @@ function create_hotlinks(){ global $U; //Make hotlinks for URLs, redirect through dereferrer script to prevent session leakage // 1. all explicit schemes with whatever xxx://yyyyyyy - $U['message']=preg_replace('~(\w*://[^\s<>]+)~i', "<<$1>>", $U['message']); + $U['message']=preg_replace('~(\w+://[^\s<>]+)~i', "<<$1>>", $U['message']); // 2. valid URLs without scheme: $U['message']=preg_replace('~((?:[^\s<>]*:[^\s<>]*@)?[a-z0-9\-]+(?:\.[a-z0-9\-]+)+(?::\d*)?/[^\s<>]*)(?![^<>]*>)~i', "<<$1>>", $U['message']); // server/path given $U['message']=preg_replace('~((?:[^\s<>]*:[^\s<>]*@)?[a-z0-9\-]+(?:\.[a-z0-9\-]+)+:\d+)(?![^<>]*>)~i', "<<$1>>", $U['message']); // server:port given