mirror of
https://github.com/revoltchat/revite.git
synced 2024-11-09 08:43:37 -05:00
fix: correctly match protocols
This commit is contained in:
parent
e6ad6a552e
commit
6b9106c975
1 changed files with 33 additions and 18 deletions
|
@ -1,3 +1,6 @@
|
|||
/**
|
||||
* Type of link
|
||||
*/
|
||||
type LinkType =
|
||||
| {
|
||||
type: "navigate";
|
||||
|
@ -6,6 +9,9 @@ type LinkType =
|
|||
| { type: "external"; href: string; url: URL }
|
||||
| { type: "none" };
|
||||
|
||||
/**
|
||||
* Allowed origins for relative navigation
|
||||
*/
|
||||
const ALLOWED_ORIGINS = [
|
||||
location.hostname,
|
||||
"app.revolt.chat",
|
||||
|
@ -13,27 +19,36 @@ const ALLOWED_ORIGINS = [
|
|||
"local.revolt.chat",
|
||||
];
|
||||
|
||||
/**
|
||||
* Permissible protocols in URLs
|
||||
*/
|
||||
const PROTOCOL_WHITELIST = [
|
||||
"https",
|
||||
"ftp",
|
||||
"ftps",
|
||||
"mailto",
|
||||
"news",
|
||||
"irc",
|
||||
"gopher",
|
||||
"nntp",
|
||||
"feed",
|
||||
"telnet",
|
||||
"mms",
|
||||
"rtsp",
|
||||
"svn",
|
||||
"git",
|
||||
"tel",
|
||||
"fax",
|
||||
"xmpp",
|
||||
"magnet",
|
||||
"http:",
|
||||
"https:",
|
||||
"ftp:",
|
||||
"ftps:",
|
||||
"mailto:",
|
||||
"news:",
|
||||
"irc:",
|
||||
"gopher:",
|
||||
"nntp:",
|
||||
"feed:",
|
||||
"telnet:",
|
||||
"mms:",
|
||||
"rtsp:",
|
||||
"svn:",
|
||||
"git:",
|
||||
"tel:",
|
||||
"fax:",
|
||||
"xmpp:",
|
||||
"magnet:",
|
||||
];
|
||||
|
||||
/**
|
||||
* Determine what kind of link we are dealing with and sanitise any malicious input
|
||||
* @param href Input URL
|
||||
* @returns Link Type
|
||||
*/
|
||||
export function determineLink(href?: string): LinkType {
|
||||
let internal,
|
||||
url: URL | null = null;
|
||||
|
|
Loading…
Reference in a new issue