Relax restrictions on URL validation for oauth_callback. We need to

allow custom schemes like mustard:// etc.

1 files changed, 1 insertions, 4 deletions

diff --git a/actions/apioauthrequesttoken.php b/actions/apioauthrequesttoken.php
index 7def1aa95..376567125 100644
--- a/actions/apioauthrequesttoken.php
+++ b/actions/apioauthrequesttoken.php
@@ -154,10 +154,7 @@ class ApiOauthRequestTokenAction extends ApiOauthAction
 
             return true;
         } else {
-            return Validate::uri(
-                $callback,
-                array('allowed_schemes' => array('http', 'https'))
-            );
+            return Validate::uri($callback);
         }
     }