youwen5/eexiv
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): incorrect url substring sanitization (#50)

Browse source 
* fix(security): incorrect url substring sanitization

* fix: graceful error handling in git url parsing

* refactor: simplify url parsing logic
This commit is contained in:
Ananth Venkatesh 2024-03-07 09:48:46 -08:00 committed by GitHub
parent 3bdb9ff2e2
commit a2a85696b5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 13 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
src/app/components/DataDisplay.tsx
View file

@ -7,9 +7,19 @@ import Link from 'next/link'
import { Fragment } from 'react' import { Fragment } from 'react'
const getRepo = (link: string) => { const getRepo = (link: string) => {
if (link.includes('github.com')) { let host
const owner = link.split('/')[3]
const name = link.split('/')[4] try {
host = new URL(link).host
} catch (error) {
console.error('Invalid URL:', link)
return
}
if (host === 'github.com') {
const parts = link.split('/')
const owner = parts[3]
const name = parts[4]
return `git:${owner}/${name}` return `git:${owner}/${name}`
} }
} }