function NavigationLinkBlock::validateUriElement

Form element validation handler for the 'uri' element.

Disallows saving inaccessible or untrusted URLs.

File

core/modules/navigation/src/Plugin/Block/NavigationLinkBlock.php, line 118

Class

NavigationLinkBlock

Defines a link navigation block.

Namespace

Code

public static function validateUriElement($element, FormStateInterface $form_state, $form) : void {
    $uri = static::getUserEnteredStringAsUri($element['#value']);
    $form_state->setValueForElement($element, $uri);
    // If getUserEnteredStringAsUri() mapped the entered value to an 'internal:'
    // URI , ensure the raw value begins with '/', '?' or '#'.
    // @todo '<front>' is valid input for BC reasons, may be removed by
    //   https://www.drupal.org/node/2421941
    if (parse_url($uri, PHP_URL_SCHEME) === 'internal' && !in_array($element['#value'][0], [
        '/',
        '?',
        '#',
    ], TRUE) && !str_starts_with($element['#value'], '<front>')) {
        $form_state->setError($element, new TranslatableMarkup('Manually entered paths should start with one of the following characters: / ? #'));
        return;
    }
}