Skip to content

impl: strict URL validation #164

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jul 30, 2025
Merged

impl: strict URL validation #164

merged 2 commits into from
Jul 30, 2025

Conversation

fioan89
Copy link
Collaborator

@fioan89 fioan89 commented Jul 28, 2025

This commit rejects any URL that is opaque, not hierarchical, not using http or https protocol, or it misses the hostname. The rejection is handled in the connection/auth screen and also in the URI protocol handling logicimage
image
image

This commit rejects any URL that is opaque, not hierarchical, not using http or https
protocol, or it misses the hostname. The rejection is handled in the connection/auth screen
and also in the URI protocol handling logic.
Copy link
Member

@matifali matifali left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could we make the error message a bit more explicit with an example of a correct URL? I think some of the users may not know what an opaque or hierarchical URL is.

@fioan89
Copy link
Collaborator Author

fioan89 commented Jul 29, 2025

Could we make the error message a bit more explicit with an example of a correct URL? I think some of the users may not know what an opaque or hierarchical URL is.

Done.

@fioan89 fioan89 requested a review from matifali July 29, 2025 19:49
@fioan89 fioan89 merged commit 82eee1f into main Jul 30, 2025
6 checks passed
@fioan89 fioan89 deleted the impl-strict-url-validation branch July 30, 2025 20:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants