<?php

require_once('_include.php');

$config = SimpleSAML_Configuration::getInstance();

if (array_key_exists('link_href', $_REQUEST)) {
    $link = \SimpleSAML\Utils\HTTP::checkURLAllowed($_REQUEST['link_href']);
} else {
    $link = 'index.php';
}

if (array_key_exists('link_text', $_REQUEST)) {
    $text = $_REQUEST['link_text'];
} else {
    $text = '{logout:default_link_text}';
}

$t = new SimpleSAML_XHTML_Template($config, 'logout.php');
$t->data['link'] = $link;
$t->data['text'] = $text;
$t->show();
exit();

<?php

require_once('_include.php');

$config = SimpleSAML_Configuration::getInstance();

if (array_key_exists('link_href', $_REQUEST)) {
    $link = (string) $_REQUEST['link_href'];
    $link = \SimpleSAML\Utils\HTTP::normalizeURL($link);
} else {
    $link = 'index.php';
}

if (array_key_exists('link_text', $_REQUEST)) {
    $text = $_REQUEST['link_text'];
} else {
    $text = '{logout:default_link_text}';
}

$t = new SimpleSAML_XHTML_Template($config, 'logout.php');
$t->data['link'] = $link;
$t->data['text'] = $text;
$t->show();
exit();

--- 
+++ 
@@ -5,8 +5,7 @@
 $config = SimpleSAML_Configuration::getInstance();
 
 if (array_key_exists('link_href', $_REQUEST)) {
-    $link = (string) $_REQUEST['link_href'];
-    $link = \SimpleSAML\Utils\HTTP::normalizeURL($link);
+    $link = \SimpleSAML\Utils\HTTP::checkURLAllowed($_REQUEST['link_href']);
 } else {
     $link = 'index.php';
 }
Fix another issue with URLs not being validated before displaying them into a page. Reported by John Page (hyp3rlinx).
