changedetection.io path traversal using file URI scheme without supplying hostname

SummaryThe validation for the file URI scheme falls short, and results in an attacker being able to read any file on the system. This issue only affects instances with a webdriver enabled, and ALLOWFILEURI false or not defined. DetailsThe check used for URL protocol, issafeurl, allows file: as a...