Fix ampproject#1349. Detect http(s) and format it.

Detect if action URL in the form doesn't start with http(s) and format it properly.
ricardobrg · Aug 22, 2018 · d53edc7 · d53edc7
1 parent fae8ab9
commit d53edc7
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/includes/sanitizers/class-amp-form-sanitizer.php b/includes/sanitizers/class-amp-form-sanitizer.php
@@ -68,9 +68,8 @@ public function sanitize() {
 			} else {
 				$action_url = $node->getAttribute( 'action' );
 				//check if action_url is a relative path and add the host to it
-				preg_match('(^\/?[^\/].*)',$action_url,$matches);
-				if ($matches){
-					$action_url = '//' . $_SERVER['HTTP_HOST'] . $action_url;
+				if ( ! preg_match( '#^(https?:)?//#', $action_url ) ) {
+				    $action_url = esc_url_raw( '//' . $_SERVER['HTTP_HOST'] . $action_url );
 				}
 			}
 			$xhr_action = $node->getAttribute( 'action-xhr' );