XSS vulnerability in MenuItemStaticURLType

[joricksteenstra]

There's a XSS vulnerability in the MenuItemStaticURLType type. Would it be possible to add a validation rule to the MenuItemStaticURLType. So for example add something like: 'starts_with:/,https://,http://'.

[Senexis]

Don't know if you've figured out a solution already, but this may help if not:

You should just be able to remove the menu type from the config (menu_item_types), create an extended MenuItemStaticURLType class, and then add the rule to the new class's getRules() method. Don't forget to add your new class to the config!