Discovered when playing with PHP 7.3 @ MDL-63420, there is a wrong strpos() use in lib/filelib.php

$pos = strpos('/', $current, 8);

It needs to be reviewed, surely params are swapped and there is an attempt to ignore the first protocol chars or something like that.

Ciao