From 79c101b4a2cb078755dc41ffb86ba0a4f441bb4c Mon Sep 17 00:00:00 2001 From: Nimetu Date: Tue, 11 Aug 2015 19:35:27 +0300 Subject: [PATCH] Fix 'ah:' urls for untrusted domains --- code/nel/src/gui/group_html.cpp | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/code/nel/src/gui/group_html.cpp b/code/nel/src/gui/group_html.cpp index 0c9ee58a0..f2df454cb 100644 --- a/code/nel/src/gui/group_html.cpp +++ b/code/nel/src/gui/group_html.cpp @@ -709,10 +709,12 @@ namespace NLGUI if (present[MY_HTML_A_HREF] && value[MY_HTML_A_HREF]) { string suri = value[MY_HTML_A_HREF]; - if(_TrustedDomain && suri.find("ah:") == 0) + if(suri.find("ah:") == 0) { - // in ah: command we don't respect the uri standard so the HTAnchor_address doesn't work correctly - _Link.push_back (suri); + if (_TrustedDomain) + _Link.push_back (suri); + else + _Link.push_back (""); } else if (_TrustedDomain && suri[0] == '#') {