Make isUrl stricter

codemeta · Oct 25, 2024 · ba617e4 · ba617e4
1 parent c9f6aba
commit ba617e4
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/cypress/integration/validation.js b/cypress/integration/validation.js
@@ -160,6 +160,19 @@ describe('URLs validation', function() {
         cy.get('#errorMessage').should('have.text', 'Invalid URL in field "codeRepository": "foo"');
     });
 
+    it('errors on invalid URL that Javascript considers to be valid', function() {
+        cy.get('#codemetaText').then((elem) =>
+            elem.text(JSON.stringify({
+                "@context": "https://doi.org/10.5063/schema/codemeta-2.0",
+                "@type": "SoftwareSourceCode",
+                "codeRepository": "foo: bar",
+            }))
+        );
+        cy.get('#validateCodemeta').click();
+
+        cy.get('#errorMessage').should('have.text', 'Invalid URL in field "codeRepository": "foo: bar"');
+    });
+
     it('errors on non-string instead of URL', function() {
         cy.get('#codemetaText').then((elem) =>
             elem.text(JSON.stringify({

diff --git a/js/utils.js b/js/utils.js
@@ -29,6 +29,10 @@ function trimSpaces(s) {
 function isUrl(s) {
     try {
         const url = new URL(s);
+        if (url.origin == "null") {
+            // forbids "foo: bar" as a URL, for example
+            return false;
+        }
         return true;
     } catch (e) {
         return false;