eightball/PluralKit
1
0
Fork 0
mirror of https://github.com/PluralKit/PluralKit.git synced 2026-02-10 07:47:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix(bot): validate url in pk;import

Browse source
This commit is contained in:
spiral 2022-12-06 10:15:20 +00:00
parent ac5774df3d
commit 2fea773d7e
No known key found for this signature in database
GPG key ID: 244A11E4B0BCF40E
4 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

7
PluralKit.Bot/CommandSystem/Context/ContextAvatarExt.cs
View file

@ -23,11 +23,8 @@ public static class ContextAvatarExt
if (arg.StartsWith("<") && arg.EndsWith(">"))
arg = arg.Substring(1, arg.Length - 2);
if (!Uri.TryCreate(arg, UriKind.Absolute, out var uri))
throw Errors.InvalidUrl(arg);
if (uri.Scheme != "http" && uri.Scheme != "https")
throw Errors.InvalidUrl(arg);
if (!Core.MiscUtils.TryMatchUri(arg, out var uri))
throw Errors.InvalidUrl;
// ToString URL-decodes, which breaks URLs to spaces; AbsoluteUri doesn't
return new ParsedImage { Url = uri.AbsoluteUri, Source = AvatarSource.Url };