function PMA_isAllowedDomain($url)
{
    $arr = parse_url($url);
    $domain = $arr["host"];
    $domainWhiteList = array(
        /* Include current domain */
        $_SERVER['SERVER_NAME'],
        /* phpMyAdmin domains */
        'wiki.phpmyadmin.net', 'www.phpmyadmin.net', 'phpmyadmin.net',
        'demo.phpmyadmin.net',
        'docs.phpmyadmin.net',
        /* mysql.com domains */
        'dev.mysql.com','bugs.mysql.com',
        /* mariadb domains */
        'mariadb.org',
        /* php.net domains */
        'php.net',
        /* sourceforge.net domain */
        'sourceforge.net',
        /* Github domains*/
        'github.com','www.github.com',
        /* Following are doubtful ones. */
        'www.primebase.com',
        'pbxt.blogspot.com',
        'www.percona.com',
        'mysqldatabaseadministration.blogspot.com',
        'ronaldbradford.com',
        'xaprb.com',
    );
    if (in_array(mb_strtolower($domain), $domainWhiteList)) {
        return true;
    }

    return false;
}
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.