DatseMultimediaSites
/
Sharkey
mirror of https://activitypub.software/TransFem-org/Sharkey.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

verify that preview URL is valid

This commit is contained in:
Hazelnoot 2024-11-18 10:41:18 -05:00
parent c48faca707
commit 4c6cec552e
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/backend/src/server/web/UrlPreviewService.ts
View File

@ -65,7 +65,7 @@ export class UrlPreviewService {
reply: FastifyReply, reply: FastifyReply,
): Promise<object | undefined> { ): Promise<object | undefined> {
const url = request.query.url; const url = request.query.url;
if (typeof url !== 'string') { if (typeof url !== 'string' || !URL.canParse(url)) {
reply.code(400); reply.code(400);
return; return;
} }