apparently not only regex 'https?' urls are sent

diff --git a/actions/apioauthrequesttoken.php b/actions/apioauthrequesttoken.php
index 083bbc37563397e8274ff17a32290b4c53ae53dd..e961f4f46464cf8463af219ba41a45f5a0cfb460 100644 (file)
--- a/actions/apioauthrequesttoken.php
+++ b/actions/apioauthrequesttoken.php
@@ -146,7 +146,7 @@ class ApiOAuthRequestTokenAction extends ApiOAuthAction
 
             return true;
         } else {
-            return common_valid_http_url($callback);
+            return filter_var($callback, FILTER_VALIDATE_URL);
         }
     }
 }