From 4eb270e4ea780ca79027c8264db4e64ac56f2bba Mon Sep 17 00:00:00 2001
From: Frédéric Buclin <LpSolit@gmail.com>
Date: Wed, 7 Jan 2015 14:36:59 +0100
Subject: Bug 1114395: Markdown only accepts the http and https protocols
 r/a=glob

---
 Bugzilla/Markdown.pm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'Bugzilla')

diff --git a/Bugzilla/Markdown.pm b/Bugzilla/Markdown.pm
index 353c2ff6a..ed5608025 100644
--- a/Bugzilla/Markdown.pm
+++ b/Bugzilla/Markdown.pm
@@ -230,8 +230,8 @@ sub _DoAnchors {
             $url =~ s@</a$@@;
         }
 
-        # Limit URL to HTTP/HTTPS links
-        $url = "http://$url" unless $url =~ m!^https?://!i;
+        my $safe_url_regexp = Bugzilla::Template::SAFE_URL_REGEXP();
+        $url = "http://$url" unless $url =~ /^$safe_url_regexp$/;
 
         $self->_GenerateAnchor($whole_match, $link_text, undef, $url, $title);
     }xsge;
-- 
cgit v1.2.3-24-g4f1b