yume/paricafe
1
0
Fork 0
mirror of https://github.com/paricafe/misskey.git synced 2025-01-29 12:50:15 -06:00
Code Issues Projects Releases Packages Wiki Activity

verify that preview URL is valid

Browse source
This commit is contained in:
Hazelnoot 2024-11-18 10:41:18 -05:00 committed by fly_mc
parent c8a1940a14
commit d1965bf9a3
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
packages/backend/src/server/web/UrlPreviewService.ts
View file

@ -52,7 +52,7 @@ export class UrlPreviewService {
reply: FastifyReply,
): Promise<object | undefined> {
const url = request.query.url;
if (typeof url !== 'string') {
if (typeof url !== 'string' || !URL.canParse(url)) {
reply.code(400);
return;
}