Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
The _nodewords_prepare_path() function does not check the system base path when it trims the value submitted as the URL value.
Comment | File | Size | Author |
---|---|---|---|
#2 | nodewords-n1697936-2.patch | 1.88 KB | DamienMcKenna |
#1 | nodewords-n1697936.patch | 1.71 KB | DamienMcKenna |
Comments
Comment #1
DamienMcKennaI think this should do it. Rather than simply removing the slash from the start of the URL, it removes the base_path().
Comment #2
DamienMcKennaA slight correction - it should use drupal_strlen() instead of strlen(), given it's already using drupal_substr().
Comment #3
DamienMcKennaCommitted.
Comment #4
DamienMcKennaComment #6
DamienMcKenna