verify that preview URL is valid

2024-11-18 10:41:18 -05:00 · 2024-11-18 10:41:18 -05:00 · 4c6cec552e
parent c48faca707
commit 4c6cec552e
1 changed files with 1 additions and 1 deletions
--- a/packages/backend/src/server/web/UrlPreviewService.ts
+++ b/packages/backend/src/server/web/UrlPreviewService.ts
@ -65,7 +65,7 @@ export class UrlPreviewService {
 		reply: FastifyReply,
 	): Promise<object | undefined> {
 		const url = request.query.url;
-		if (typeof url !== 'string') {
+		if (typeof url !== 'string' || !URL.canParse(url)) {
 			reply.code(400);
 			return;
 		}