SS-2018-008: BackURL validation bypass with malformed URLs

PKSA-r6q9-f6rj-1d2w

Affected package: silverstripe/framework

Affected version: >=4.0.0,<4.0.4|>=4.1.0,<4.1.1

Reported by:
FriendsOfPHP/security-advisories