The _nodewords_prepare_path() function does not check the system base path when it trims the value submitted as the URL value.

Comments

damienmckenna’s picture

Status: Active » Needs review
StatusFileSize
new1.71 KB

I think this should do it. Rather than simply removing the slash from the start of the URL, it removes the base_path().

damienmckenna’s picture

StatusFileSize
new1.88 KB

A slight correction - it should use drupal_strlen() instead of strlen(), given it's already using drupal_substr().

damienmckenna’s picture

Committed.

damienmckenna’s picture

Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

damienmckenna’s picture

Assigned: damienmckenna » Unassigned
Issue summary: View changes