From 3f71e110183f8b59c27e3e53e6e5fdf8eff7ed23 Mon Sep 17 00:00:00 2001 From: Tyler Date: Wed, 16 Oct 2019 19:35:11 -0400 Subject: [PATCH] Add validation for scheme --- default.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/default.go b/default.go index 616d639..52d4077 100644 --- a/default.go +++ b/default.go @@ -58,6 +58,10 @@ func (api *LinkInfoApi) DefaultLinkHandler(link string) (*LinkInfo, error) { return nil, err } + if u.Scheme != "http" && u.Scheme != "https" { + return nil, errors.New("unsupported scheme") + } + if u.Host == "localhost" { return nil, errors.New("url is localhost") } else if ip := net.ParseIP(u.Host); ip != nil && isPrivateIP(ip) {