teja156/SimpleIPLogger

No check on link shortening functionality; User can enter any link which might not be even valid

Opened this issue · 0 comments

No check on link shortening functionality; User can enter any link which might not be even valid

There is no check in the ui/frontend for the long url input; One can easily just put any url not to mention doesn't even care about a domain name.

no check on domain name

For example, you could put in example in the input but it wouldn't check that the url is actually valid. It would log the info as expected; But it would redirect you to the invalid url as well.

invalid domain

It is probably not desired for something like a url shortener in general.

This could be simply solved by adding a simple regex check in the form javascript.