allow relative urls for everything except blti and oembed

Change-Id: Ie06d6e2bfbdf20cd58d20a9a5b9b36e297e0261f Reviewed-on: https://gerrit.instructure.com/7179 Tested-by: Hudson <[email protected]> Reviewed-by: Brian Palmer <[email protected]>
kyroskoh · Nov 29, 2011 · e347c92 · e347c92
1 parent e4033a9
commit e347c92
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/external_content_controller.rb b/app/controllers/external_content_controller.rb
@@ -30,7 +30,7 @@ def success
     elsif params[:service] == 'external_tool'
       params[:embed_type] = nil unless ['oembed', 'basic_lti', 'link', 'image', 'iframe'].include?(params[:embed_type])
       @retrieved_data = request.query_parameters
-      if @retrieved_data[:url]
+      if @retrieved_data[:url] && ['oembed', 'basic_lti'].include?(params[:embed_type])
         begin
           uri = URI.parse(@retrieved_data[:url])
           unless uri.scheme