Index: includes/common.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/common.inc,v
retrieving revision 1.555
diff -u -F^f -r1.555 common.inc
--- includes/common.inc	14 Aug 2006 07:14:48 -0000	1.555
+++ includes/common.inc	16 Aug 2006 21:18:55 -0000
@@ -964,7 +964,8 @@ function url($path = NULL, $query = NULL
 
   // Return an external link if $path contains an allowed absolute URL.
   // Only call the slow filter_xss_bad_protocol if $path contains a ':'.
-  if (strpos($path, ':') !== FALSE && filter_xss_bad_protocol($path, FALSE) == check_plain($path)) {
+  // Also check for paths beginning with '/'
+  if ((strpos($path, ':') !== FALSE && filter_xss_bad_protocol($path, FALSE) == check_plain($path)) || strpos($path, '/') === 0) {
     // Split off the fragment
     if (strpos($path, '#')) {
       list($path, $old_fragment) = explode('#', $path, 2);