Index: news-api/api/pom.xml
===================================================================
--- news-api/api/pom.xml	(revision 128884)
+++ news-api/api/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
   <name>sakai-news-api</name>
@@ -34,7 +34,6 @@
     <dependency>
       <groupId>commons-logging</groupId>
       <artifactId>commons-logging</artifactId>
-      <version>${sakai.commons-logging.version}</version>
     </dependency>
   </dependencies>
   <build>
Index: web-help/pom.xml
===================================================================
--- web-help/pom.xml	(revision 128884)
+++ web-help/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../pom.xml</relativePath>
   </parent>
   <name>Sakai Web Help</name>
Index: web-api/api/pom.xml
===================================================================
--- web-api/api/pom.xml	(revision 128884)
+++ web-api/api/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
   <name>sakai-web-api</name>
Index: web-portlet/src/java/org/sakaiproject/portlets/PortletIFrame.java
===================================================================
--- web-portlet/src/java/org/sakaiproject/portlets/PortletIFrame.java	(revision 128885)
+++ web-portlet/src/java/org/sakaiproject/portlets/PortletIFrame.java	(working copy)
@@ -99,6 +99,8 @@
 import org.sakaiproject.authz.api.Role;
 import org.sakaiproject.authz.cover.AuthzGroupService;
 
+import org.apache.commons.validator.routines.UrlValidator;
+
 // Velocity
 import org.apache.velocity.VelocityContext;
 import org.apache.velocity.context.Context;
@@ -339,7 +341,7 @@
             //System.out.println("special="+special+" source="+source+" pgc="+placement.getContext()+" macroExpansion="+macroExpansion+" passPid="+passPid+" PGID="+placement.getId()+" sakaiPropertiesUrlKey="+sakaiPropertiesUrlKey+" url="+url);
 
 			if ( url != null && url.trim().length() > 0 ) {
-				if ( ! FormattedText.validateURL(url) ) {
+				if ( ! validateURL(url) ) {
 					M_log.warn("invalid URL suppressed placement="+placement.getId()+" site="+placement.getContext()+" url="+url);
 					url = "about:blank";
 				}
@@ -682,7 +684,7 @@
             }
 
             // If we have a URL from the user, lets validate it
-            if ((!StringUtils.isBlank(source)) && (!FormattedText.validateURL(source)) ) {
+            if ((!StringUtils.isBlank(source)) && (!validateURL(source)) ) {
                 addAlert(request, rb.getString("gen.url.invalid"));
                 return;
             }
@@ -700,7 +702,7 @@
             }
 
             // If we have an infourl from the user, lets validate it
-            if ((!StringUtils.isBlank(infoUrl)) && (!FormattedText.validateURL(infoUrl)) ) {
+            if ((!StringUtils.isBlank(infoUrl)) && (!validateURL(infoUrl)) ) {
                 addAlert(request, rb.getString("gen.url.invalid"));
                 return;
             }
@@ -1263,4 +1265,33 @@
             super(text);
         }
     }
+
+	// Back port for 2.8
+    private static final String PROTOCOL_PREFIX = "http:";
+    private static final String HOST_PREFIX = "http://127.0.0.1";
+    private static final String ABOUT_BLANK = "about:blank";
+
+    public boolean validateURL(String urlToValidate) {
+        if (StringUtils.isBlank(urlToValidate)) return false;
+
+		if ( ABOUT_BLANK.equals(urlToValidate) ) return true;
+
+        // For a protocol-relative URL, we validate with protocol attached 
+        // RFC 1808 Section 4
+        if ((urlToValidate.startsWith("//")) && (urlToValidate.indexOf("://") == -1))
+        {
+            urlToValidate = PROTOCOL_PREFIX + urlToValidate;
+        }
+
+        // For a site-relative URL, we validate with host name and protocol attached 
+        // SAK-13787 SAK-23752
+        if ((urlToValidate.startsWith("/")) && (urlToValidate.indexOf("://") == -1))
+        {
+            urlToValidate = HOST_PREFIX + urlToValidate;
+        }
+
+        // Validate the url
+        UrlValidator urlValidator = new UrlValidator(UrlValidator.ALLOW_LOCAL_URLS);
+        return urlValidator.isValid(urlToValidate);
+	}
 }
Index: web-portlet/pom.xml
===================================================================
--- web-portlet/pom.xml	(revision 128885)
+++ web-portlet/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId> 
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../pom.xml</relativePath>
   </parent>
   <name>sakai-web-portlet</name>
@@ -43,6 +43,11 @@
 			<version>3.1</version>
         </dependency>
         <dependency>
+             <groupId>commons-validator</groupId>
+             <artifactId>commons-validator</artifactId>
+             <version>1.4.0</version>
+         </dependency>
+        <dependency>
             <groupId>javax.servlet</groupId>
             <artifactId>servlet-api</artifactId>
         </dependency>
Index: news-tool/tool/pom.xml
===================================================================
--- news-tool/tool/pom.xml	(revision 128884)
+++ news-tool/tool/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
   <name>sakai-news-tool</name>
@@ -53,7 +53,6 @@
     <dependency>
       <groupId>commons-logging</groupId>
       <artifactId>commons-logging</artifactId>
-      <version>${sakai.commons-logging.version}</version>
     </dependency>
     <dependency>
       <groupId>org.springframework</groupId>
@@ -75,4 +74,4 @@
       </resource>
     </resources>
   </build>
-</project>
\ No newline at end of file
+</project>
Index: web-tool/tool/pom.xml
===================================================================
--- web-tool/tool/pom.xml	(revision 128884)
+++ web-tool/tool/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
   <name>sakai-web-tool</name>
@@ -45,7 +45,6 @@
     <dependency>
       <groupId>commons-logging</groupId>
       <artifactId>commons-logging</artifactId>
-      <version>${sakai.commons-logging.version}</version>
     </dependency>
     <dependency>
       <groupId>commons-validator</groupId>
Index: pom.xml
===================================================================
--- pom.xml	(revision 128884)
+++ pom.xml	(working copy)
@@ -4,13 +4,13 @@
   <parent>
     <artifactId>base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../pom.xml</relativePath>
   </parent>
   <name>Sakai Web Project</name>
   <groupId>org.sakaiproject</groupId>
   <artifactId>web-base</artifactId>
-  <version>2.10-SNAPSHOT</version>
+  <version>2.9.1</version>
   <packaging>pom</packaging>
   <scm>
     <connection>scm:svn:https://source.sakaiproject.org/svn/web/trunk</connection>
@@ -53,12 +53,12 @@
       <dependency>
         <groupId>org.sakaiproject</groupId>
         <artifactId>sakai-news-impl</artifactId>
-        <version>2.10-SNAPSHOT</version>
+        <version>2.9.1</version>
       </dependency>
       <dependency>
         <groupId>org.sakaiproject</groupId>
         <artifactId>sakai-web-impl</artifactId>
-        <version>2.10-SNAPSHOT</version>
+        <version>2.9.1</version>
       </dependency>
       <dependency>
         <groupId>org.sakaiproject.velocity</groupId>
Index: news-impl/impl/pom.xml
===================================================================
--- news-impl/impl/pom.xml	(revision 128884)
+++ news-impl/impl/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
   <name>sakai-news-impl</name>
@@ -84,7 +84,6 @@
     <dependency>
       <groupId>commons-logging</groupId>
       <artifactId>commons-logging</artifactId>
-      <version>${sakai.commons-logging.version}</version>
     </dependency>
 <!--javax.servletservlet-api${sakai.servletapi.version}-->
     <dependency>
Index: news-impl/pack/pom.xml
===================================================================
--- news-impl/pack/pom.xml	(revision 128884)
+++ news-impl/pack/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
   <name>sakai-news-pack</name>
Index: web-impl/impl/pom.xml
===================================================================
--- web-impl/impl/pom.xml	(revision 128884)
+++ web-impl/impl/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
   <name>sakai-web-impl</name>
Index: web-impl/pack/pom.xml
===================================================================
--- web-impl/pack/pom.xml	(revision 128884)
+++ web-impl/pack/pom.xml	(working copy)
@@ -4,7 +4,7 @@
   <parent>
     <artifactId>web-base</artifactId>
     <groupId>org.sakaiproject</groupId>
-    <version>2.10-SNAPSHOT</version>
+    <version>2.9.1</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
   <name>sakai-web-pack</name>