TYPO3 v15 dev-main snapshot ()

2026-08-10 22:31:09 +02:00
commit af8cc155b5
6818 changed files with 642608 additions and 0 deletions
@@ -0,0 +1,74 @@
+<?php
+
+/*
+ * This file is part of the TYPO3 CMS project.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+namespace TYPO3\CMS\Core\LinkHandling;
+
+/**
+ * Resolves URLs (simple, no magic needed)
+ */
+class UrlLinkHandler implements LinkHandlingInterface
+{
+    /**
+     * Returns the URL as given
+     */
+    public function asString(array $parameters): string
+    {
+        return $this->addHttpSchemeAsFallback($parameters['url']);
+    }
+
+    /**
+     * Returns the URL as is
+     *
+     * @param array $data (needs 'url') inside
+     */
+    public function resolveHandlerData(array $data): array
+    {
+        return ['url' => $this->addHttpSchemeAsFallback($data['url'])];
+    }
+
+    /**
+     * Ensures that a scheme is always added, if www.typo3.org was added previously.
+     *
+     * @param string $url the URL
+     */
+    protected function addHttpSchemeAsFallback(string $url): string
+    {
+        if (!empty($url)) {
+            // We expect this an absolute path, and leave as is. We also leave double slashes ('//') as is.
+            if (str_starts_with($url, '/')) {
+                return $url;
+            }
+            $scheme = parse_url($url, PHP_URL_SCHEME);
+            if (empty($scheme)) {
+                $url = self::getDefaultScheme() . '://' . $url;
+            } elseif (in_array(strtolower($scheme), ['javascript', 'data'], true)) {
+                // deny using insecure scheme's like `javascript:` or `data:` as URL scheme
+                $url = '';
+            }
+        }
+        return $url;
+    }
+
+    /**
+     * Returns the scheme (e.g. `http`) to be used for links with URLs without a scheme, e.g., for `www.example.com`.
+     *
+     * @return non-empty-string
+     */
+    public static function getDefaultScheme(): string
+    {
+        return ($GLOBALS['TYPO3_CONF_VARS']['SYS']['defaultScheme'] ?? '')
+            ?: LinkHandlingInterface::DEFAULT_SCHEME;
+    }
+}