Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-12-21 07:50:37 +01:00
Code Issues Packages Projects Releases Wiki Activity

more secure isRelativeUrl (#8087)

Browse Source
This commit is contained in:
Aziz Khoury
2019-12-17 23:08:09 +02:00
committed by Barış Soner Uşaklı
parent cac4cba224
commit acca0b956e
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
public/src/utils.js
View File

@@ -487,9 +487,18 @@
});
},
// https://github.com/sindresorhus/is-absolute-url
isAbsoluteUrlRE: /^[a-zA-Z][a-zA-Z\d+\-.]*:/,
isWinPathRE: /^[a-zA-Z]:\\/,
isAbsoluteUrl: function (url) {
if (utils.isWinPathRE.test(url)) {
return false;
}
return utils.isAbsoluteUrlRE.test(url);
},
isRelativeUrl: function (url) {
var firstChar = String(url || '').charAt(0);
return (firstChar === '.' || firstChar === '/');
return !utils.isAbsoluteUrl(url);
},
makeNumbersHumanReadable: function (elements) {