Make sure the URL installer does not allow other schemas then http and https

[zero-24]

Pull Request for an Issue raised to the JSST.

Summary of Changes

Make sure the URL installer does not allow other schemas then http and https

Testing Instructions

• Try to install an extension form this url: ftp://joomla.zip
• Joomla tires to contact an FTP server
• apply this patch
• try ftp://joomla.zip again.
• There is now a dedicated message and we dont try to contact an FTP server
• make sure that extension installation from URL still works as before.

Actual result BEFORE applying this Pull Request

There is an message but we still try to contact the FTP server

Expected result AFTER applying this Pull Request

There is now a dedicated message and we dont try to contact an FTP server

Documentation Changes Required

none

[toivo]

I have tested this item ✅ successfully on eae250f

Tested successfully in 3.9.25-dev of 20 January using PHP 8.0.1.

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/32087.}

[ghost]

I have tested this item ✅ successfully on eae250f

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/32087.}

[zero-24]

Lol when I reported this years ago I was told it was a non-problem and only idiots would try to use a non http prefix ...

Well its still not handled as security issue but it was reported as one. ;) Given that we had some kind of not working JS "validation" we choose to move this forward to the public tracker and get it fixed anyway.

[richard67]

I have tested this item ✅ successfully on e393a65

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/32087.}

[ghost]

I have tested this item ✅ successfully on e393a65

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/32087.}

[richard67]

RTC

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/32087.}

[drmenzelit]

Thanks

[zero-24]

Thanks @drmenzelit