1 files changed, 4 insertions, 0 deletions
diff --git a/Auth/OpenID/TrustRoot.php b/Auth/OpenID/TrustRoot.php
index e3727a3..c420709 100644
--- a/Auth/OpenID/TrustRoot.php
+++ b/Auth/OpenID/TrustRoot.php
@@ -95,6 +95,10 @@ class Auth_OpenID_TrustRoot {
             return false;
         }
 
+        if (preg_match("/:\/\/[^:]+(:\d+){2,}(\/|$)/", $trust_root)) {
+            return false;
+        }
+
         $parts = @parse_url($trust_root);
         if ($parts === false) {
             return false;