mirrors/keepassxc
1
0
Fork 0
mirror of https://github.com/keepassxreboot/keepassxc.git synced 2025-04-01 19:47:39 +03:00
Code Issues Projects Releases Packages Wiki Activity

Prevent using URL wildcards in TLD

Browse source
This commit is contained in:
varjolintu 2025-02-12 18:12:28 +02:00 • committed by Jonathan White
parent 9ba6ada266
commit 0b5ae1775c
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/gui/UrlTools.cpp
View file

@ -195,7 +195,7 @@ bool UrlTools::isUrlValid(const QString& urlField, bool looseComparison) const
// Prevent TLD wildcards
if (looseComparison && url.contains(UrlTools::URL_WILDCARD)) {
const auto tld = getTopLevelDomainFromUrl(url);
if (qUrl.host() == QString("%1.%2").arg(UrlTools::URL_WILDCARD, tld)) {
if (tld.contains(UrlTools::URL_WILDCARD) || qUrl.host() == QString("%1.%2").arg(UrlTools::URL_WILDCARD, tld)) {
return false;
}
}

4
tests/TestUrlTools.cpp
View file

@ -158,6 +158,10 @@ void TestUrlTools::testIsUrlValidWithLooseComparison()
urls["*.com/"] = false;
urls["*.com/*"] = false;
urls["**.com/**"] = false;
urls["*.*"] = false;
urls["https://example.*"] = false;
urls["https://*.example.*"] = false;
urls["https://example.c*"] = false;
QHashIterator<QString, bool> i(urls);
while (i.hasNext()) {