bertvandepoel / tabby

A friendly tool to manage debt
GNU Affero General Public License v3.0
71 stars 11 forks source link

Fix $base_url handling to only strip the front part #1

Closed vierbergenlars closed 5 years ago

vierbergenlars commented 5 years ago

Using str_replace replaces all occurences of the $base_url when parsing the request URI. This error is most apparent when $base_url is set to '/', where all slashes in the URL are removed, and later matches on $location with anything containing a slash will fail, falling back to the default case.