ztr/TelegramPWA
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Link: Validate protocol by whitelist (#3505)

Browse Source
This commit is contained in:
Alexander Zinchuk 2023-07-05 13:16:13 +02:00
parent 392b2d53cb
commit 31bd0d909d
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/util/ensureProtocol.ts
View File

@ -1,19 +1,22 @@
const PROTOCOL_WHITELIST = new Set(['http:', 'https:', 'tg:', 'ton:', 'mailto:', 'tel:']);
// HTTP was chosen by default as a fix for https://bugs.telegram.org/c/10712.
// It is also the default protocol in the official TDesktop client.
const FALLBACK_PREFIX = 'http://';
export function ensureProtocol(url?: string) { export function ensureProtocol(url?: string) {
if (!url) { if (!url) {
return undefined; return undefined;
} }
// HTTP was chosen by default as a fix for https://bugs.telegram.org/c/10712.
// It is also the default protocol in the official TDesktop client.
try { try {
const parsedUrl = new URL(url); const parsedUrl = new URL(url);
// eslint-disable-next-line no-script-url // eslint-disable-next-line no-script-url
if (parsedUrl.protocol === 'javascript:') { if (!PROTOCOL_WHITELIST.has(parsedUrl.protocol)) {
return `http://${url}`; return `${FALLBACK_PREFIX}${url}`;
} }
return url; return url;
} catch (err) { } catch (err) {
return `http://${url}`; return `${FALLBACK_PREFIX}${url}`;
} }
} }