Add hostname validation to URL parsing

jsdelivr · Feb 8, 2025 · c67d312 · c67d312
1 parent 088d5f6
commit c67d312
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/views/components/tags-input.html b/src/views/components/tags-input.html
@@ -381,6 +381,11 @@
 			try {
 				let { protocol, port, pathname, hostname, search } = new URL(url);
 
+				if (!hostname) {
+					// Just one extra check. The constructor above may throw too.
+					throw new Error('Invalid URL');
+				}
+
 				this.set('gpMainOpts.type', 'HTTP');
 				this.set('gpMainOpts.target', tagsArr ? [ ...tagsArr, hostname ].join(delimiter) : hostname);
 				this.set('gpHttpOpts.protocol', protocol.replace(':', '').toUpperCase());