Add validator class for HTTP parameters

1 files changed, 2 insertions, 1 deletions

diff --git a/app/Http/RequestHandlers/AddUnlinkedAction.php b/app/Http/RequestHandlers/AddUnlinkedAction.php
index 81e7949cc8..51e7437ad2 100644
--- a/app/Http/RequestHandlers/AddUnlinkedAction.php
+++ b/app/Http/RequestHandlers/AddUnlinkedAction.php
@@ -21,6 +21,7 @@ namespace Fisharebest\Webtrees\Http\RequestHandlers;
 
 use Fisharebest\Webtrees\Services\GedcomEditService;
 use Fisharebest\Webtrees\Tree;
+use Fisharebest\Webtrees\Validator;
 use Psr\Http\Message\ResponseInterface;
 use Psr\Http\Message\ServerRequestInterface;
 use Psr\Http\Server\RequestHandlerInterface;
@@ -66,7 +67,7 @@ class AddUnlinkedAction implements RequestHandlerInterface
         $individual = $tree->createIndividual("0 @@ INDI\n" . $gedcom);
 
         $base_url = $request->getAttribute('base_url');
-        $url      = str_starts_with($params['url'], $base_url) ? $params['url'] : $individual->url();
+        $url      = Validator::parsedBody($request)->localUrl($base_url)->string('url') ?? $individual->url();
 
         return redirect($url);
     }