summaryrefslogtreecommitdiffstats
path: root/src/usr
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2017-01-19 13:15:08 -0500
committerjim-p <jimp@pfsense.org>2017-01-19 13:15:08 -0500
commitb29aa6e57b941577c2f9faa724134d5bf1fe3482 (patch)
tree7a803d5f2d729df080217ed835158d43c75a5990 /src/usr
parent67ccbdd3b4638536e2d7cfd26994fc87b14cb589 (diff)
downloadpfsense-b29aa6e57b941577c2f9faa724134d5bf1fe3482.zip
pfsense-b29aa6e57b941577c2f9faa724134d5bf1fe3482.tar.gz
Allow external links to show in menus as they will never match privileges and they are not items that need to be restricted.
Diffstat (limited to 'src/usr')
-rw-r--r--src/usr/local/www/head.inc4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/usr/local/www/head.inc b/src/usr/local/www/head.inc
index e19b628..b600c28 100644
--- a/src/usr/local/www/head.inc
+++ b/src/usr/local/www/head.inc
@@ -186,7 +186,9 @@ function return_ext_menu($section) {
function output_menu($arrayitem, $target = null, $section = "") {
foreach ($arrayitem as $item) {
/* If the user has access to help pages, also show the full help menu. See #5909 */
- if (isAllowedPage($item[1]) || $item[1] == "/index.php?logout" || (($section == "Help") && isAllowedPage("help.php"))) {
+ if (isAllowedPage($item[1]) || $item[1] == "/index.php?logout" ||
+ (($section == "Help") && isAllowedPage("help.php")) ||
+ (substr($item[1], 0, 8) == "https://")) {
$attr = sprintf("href=\"%s\"", htmlentities($item[1]));
if ($target) {
$attr .= sprintf(" target=\"%s\"", htmlentities($target));
OpenPOWER on IntegriCloud