Relax restrictions on URL validation for oauth_callback. We need to

allow custom schemes like mustard:// etc.

diff --git a/actions/apioauthrequesttoken.php b/actions/apioauthrequesttoken.php
index 7def1aa95ce9441c93ac094bd0a536c33687bf4a..3765671256fed83af6e0ac8a054bd9a62d616038 100644 (file)
--- a/actions/apioauthrequesttoken.php
+++ b/actions/apioauthrequesttoken.php
@@ -154,10 +154,7 @@ class ApiOauthRequestTokenAction extends ApiOauthAction
 
             return true;
         } else {
-            return Validate::uri(
-                $callback,
-                array('allowed_schemes' => array('http', 'https'))
-            );
+            return Validate::uri($callback);
         }
     }