handle malformed uri

flarum · Jan 5, 2024 · a1dd387 · a1dd387
1 parent 2aadc5c
commit a1dd387
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/framework/core/src/Forum/Controller/LogOutController.php b/framework/core/src/Forum/Controller/LogOutController.php
@@ -130,7 +130,11 @@ protected function sanitizeReturnUrl(string $url, string $base): Uri
             return new Uri($base);
         }
 
-        $parsedUrl = new Uri($url);
+        try {
+            $parsedUrl = new Uri($url);
+        } catch (\InvalidArgumentException $e) {
+            return new Uri($base);
+        }
 
         if (in_array($parsedUrl->getHost(), $this->getWhitelistedRedirectDomains())) {
             return $parsedUrl;