[Minor] Avoid FP when a protocol prefix is implicitly added

diff --git a/src/libserver/html.c b/src/libserver/html.c
index 5e29b3b84545760b65b596ec9fb156de3a6b640d..137907183184e0639e2f26166ba100869e1eec69 100644 (file)
--- a/src/libserver/html.c
+++ b/src/libserver/html.c
@@ -837,8 +837,8 @@ rspamd_html_url_is_phished (rspamd_mempool_t *pool,
                         */
                        gboolean obfuscation_found = FALSE;
 
-                       if (g_ascii_strncasecmp (url_str, "http", 4) == 0 &&
-                               strstr (url_str, "://") != NULL) {
+                       if (len > 4 && g_ascii_strncasecmp (url_text, "http", 4) == 0 &&
+                               rspamd_substring_search (url_text, len,"://", 3) != -1) {
                                /* Clearly an obfuscation attempt */
                                obfuscation_found = TRUE;
                        }