Improved: Refactor ControlFilter class without functional changes (OF…

…BIZ-13213) Fix a backport bug: isUrlInString in trunk, isUrl in 24.09
apache · Feb 28, 2025 · 8e79be8 · 8e79be8
1 parent cc22932
commit 8e79be8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/ControlFilter.java b/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/ControlFilter.java
@@ -204,7 +204,7 @@ public void doFilter(HttpServletRequest req, HttpServletResponse resp, FilterCha
             }
             if (queryString != null) {
                 queryString = URLDecoder.decode(queryString, "UTF-8");
-                if (UtilValidate.isUrlInString(queryString)
+                if (UtilValidate.isUrl(queryString)
                         || !SecuredUpload.isValidText(queryString.toLowerCase(), ALLOWEDTOKENS, true)) {
                     Debug.logError("For security reason this URL is not accepted", MODULE);
                     throw new RuntimeException("For security reason this URL is not accepted");