mirror of
https://github.com/appwrite/appwrite.git
synced 2026-05-26 13:51:13 +00:00
added explicit http and https rejection
This commit is contained in:
@@ -19,6 +19,10 @@ class AppwriteDomain extends Domain
|
||||
return false;
|
||||
}
|
||||
|
||||
if (preg_match('/^https?:\/\//', $value)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
if (str_starts_with($value, '.') || str_ends_with($value, '.') || str_contains($value, '..')) {
|
||||
return false;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user