Merge pull request #121 from CarltonSoftware/valid-uri-check

Update OAuth2.php
FriendsOfSymfony · Mar 14, 2020 · 034720e · 034720e
2 parents 606b8ea + d92fbf6
commit 034720e
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/lib/OAuth2.php b/lib/OAuth2.php
@@ -1433,8 +1433,11 @@ protected function validateRedirectUri($inputUri, $storedUris)
 
         foreach ($storedUris as $storedUri) {
             if (strcasecmp(substr($inputUri, 0, strlen($storedUri)), $storedUri) === 0) {
-                return parse_url($inputUri, PHP_URL_HOST) === parse_url($storedUri, PHP_URL_HOST) &&
-                    parse_url($inputUri, PHP_URL_PORT) === parse_url($storedUri, PHP_URL_PORT);
+                if (parse_url($inputUri, PHP_URL_HOST) === parse_url($storedUri, PHP_URL_HOST) 
+                    && parse_url($inputUri, PHP_URL_PORT) === parse_url($storedUri, PHP_URL_PORT)
+                ) {
+                    return true;   
+                }
             }
         }