diff options
| author | jim-p <jimp@pfsense.org> | 2017-01-19 13:15:08 -0500 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2017-01-19 13:15:08 -0500 |
| commit | b29aa6e57b941577c2f9faa724134d5bf1fe3482 (patch) | |
| tree | 7a803d5f2d729df080217ed835158d43c75a5990 /src/usr/local/www/head.inc | |
| parent | 67ccbdd3b4638536e2d7cfd26994fc87b14cb589 (diff) | |
| download | pfsense-b29aa6e57b941577c2f9faa724134d5bf1fe3482.zip pfsense-b29aa6e57b941577c2f9faa724134d5bf1fe3482.tar.gz | |
Allow external links to show in menus as they will never match privileges and they are not items that need to be restricted.
Diffstat (limited to 'src/usr/local/www/head.inc')
| -rw-r--r-- | src/usr/local/www/head.inc | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/usr/local/www/head.inc b/src/usr/local/www/head.inc index e19b628..b600c28 100644 --- a/src/usr/local/www/head.inc +++ b/src/usr/local/www/head.inc @@ -186,7 +186,9 @@ function return_ext_menu($section) { function output_menu($arrayitem, $target = null, $section = "") { foreach ($arrayitem as $item) { /* If the user has access to help pages, also show the full help menu. See #5909 */ - if (isAllowedPage($item[1]) || $item[1] == "/index.php?logout" || (($section == "Help") && isAllowedPage("help.php"))) { + if (isAllowedPage($item[1]) || $item[1] == "/index.php?logout" || + (($section == "Help") && isAllowedPage("help.php")) || + (substr($item[1], 0, 8) == "https://")) { $attr = sprintf("href=\"%s\"", htmlentities($item[1])); if ($target) { $attr .= sprintf(" target=\"%s\"", htmlentities($target)); |
