Restore trusted urls set to null

tvdijen · tvdijen · commit 147592cf87c7 · 2024-07-11T13:17:53.000+02:00
diff --git a/docs/simplesamlphp-changelog.md b/docs/simplesamlphp-changelog.md
@@ -12,6 +12,7 @@ Released TBD
 * Added a missing use-statement that would cause a 'class not found' exception.
 * Improved Luxembourgish (LB) translations (#2129, #2140)
 * Fix regression introduced in v2.2.2 regarding autofilling usernames.
+* Restore the possibility to set `trusted.url.domains` to null
 
 `adfs`
 
diff --git a/src/SimpleSAML/Utils/HTTP.php b/src/SimpleSAML/Utils/HTTP.php
@@ -375,7 +375,7 @@ public function checkURLAllowed(string $url, array $trustedSites = null): string
 
         // get the white list of domains
         if ($trustedSites === null) {
-            $trustedSites = Configuration::getInstance()->getOptionalArray('trusted.url.domains', []);
+            $trustedSites = Configuration::getInstance()->getOptionalArray('trusted.url.domains', null);
         }
 
         // validates the URL's host is among those allowed

Original file line number	Diff line number	Diff line change
`@@ -375,7 +375,7 @@ public function checkURLAllowed(string $url, array $trustedSites = null): string`
`375`	`375`
`376`	`376`	`// get the white list of domains`
`377`	`377`	`if ($trustedSites === null) {`
`378`		`- $trustedSites = Configuration::getInstance()->getOptionalArray('trusted.url.domains', []);`
	`378`	`+ $trustedSites = Configuration::getInstance()->getOptionalArray('trusted.url.domains', null);`
`379`	`379`	`}`
`380`	`380`
`381`	`381`	`// validates the URL's host is among those allowed`