From 1093251990e49a72da4258c09be80dfe3ef056af Mon Sep 17 00:00:00 2001
From: Harsh Mahajan <127186841+HarshMN2345@users.noreply.github.com>
Date: Fri, 1 Aug 2025 12:48:52 +0530
Subject: [PATCH] added explicit http and https rejection

---
 src/Appwrite/Domain/Validator/AppwriteDomain.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/Appwrite/Domain/Validator/AppwriteDomain.php b/src/Appwrite/Domain/Validator/AppwriteDomain.php
index 39576613f5..061ee99525 100644
--- a/src/Appwrite/Domain/Validator/AppwriteDomain.php
+++ b/src/Appwrite/Domain/Validator/AppwriteDomain.php
@@ -19,6 +19,10 @@ class AppwriteDomain extends Domain
             return false;
         }
 
+        if (preg_match('/^https?:\/\//', $value)) {
+            return false;
+        }
+
         if (str_starts_with($value, '.') || str_ends_with($value, '.') || str_contains($value, '..')) {
             return false;
         }