From f07fc76cf30cbfb6ae71134b653f26af9649ea1b Mon Sep 17 00:00:00 2001 From: Rossen Stoyanchev Date: Thu, 17 Dec 2020 14:49:57 +0000 Subject: [PATCH] Limit scheme/host check in fromUriString to HTTP URLs Closes gh-26258 --- .../org/springframework/web/util/UriComponentsBuilder.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java b/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java index e22a8d7c2fd..5ec7e8eedf1 100644 --- a/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java +++ b/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java @@ -252,8 +252,8 @@ public class UriComponentsBuilder implements UriBuilder, Cloneable { builder.schemeSpecificPart(ssp); } else { - if (StringUtils.hasLength(scheme) && !StringUtils.hasLength(host)) { - throw new IllegalArgumentException("[" + uri + "] is not a valid URI"); + if (StringUtils.hasLength(scheme) && scheme.startsWith("http") && !StringUtils.hasLength(host)) { + throw new IllegalArgumentException("[" + uri + "] is not a valid HTTP URL"); } builder.userInfo(userInfo); builder.host(host);