(ofbiz-framework) branch release18.12 updated: Implemented: Only accept right URLs as referrer (OFBIZ-13219)

[jleroux]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release18.12 by this push:
     new e7b7ae0eaa Implemented: Only accept right URLs as referrer 
(OFBIZ-13219)
e7b7ae0eaa is described below

commit e7b7ae0eaa4561a2357b198e21cc8ca63ffac105
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Wed Mar 26 10:44:58 2025 +0100

    Implemented: Only accept right URLs as referrer (OFBIZ-13219)
    
    Fixes a backport "typo" (UtilValidate::isUrlInString is UtilValidate::isUrl 
in
    24.09 and 18.12
---
 .../src/main/java/org/apache/ofbiz/webapp/stats/VisitHandler.java       | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/framework/webapp/src/main/java/org/apache/ofbiz/webapp/stats/VisitHandler.java
 
b/framework/webapp/src/main/java/org/apache/ofbiz/webapp/stats/VisitHandler.java
index 38fd355810..be75f2cd97 100644
--- 
a/framework/webapp/src/main/java/org/apache/ofbiz/webapp/stats/VisitHandler.java
+++ 
b/framework/webapp/src/main/java/org/apache/ofbiz/webapp/stats/VisitHandler.java
@@ -136,7 +136,7 @@ public class VisitHandler {
                             Locale initialLocaleObj = (Locale) 
session.getAttribute("_CLIENT_LOCALE_");
                             String initialRequest = (String) 
session.getAttribute("_CLIENT_REQUEST_");
                             String initialReferrer = (String) 
session.getAttribute("_CLIENT_REFERER_");
-                            if (!UtilValidate.isUrlInString(initialReferrer)) {
+                            if (!UtilValidate.isUrl(initialReferrer)) {
                                 initialReferrer = "Not an URL";
                             }
                             String initialUserAgent = (String) 
session.getAttribute("_CLIENT_USER_AGENT_");