-
Notifications
You must be signed in to change notification settings - Fork 7
Closed
Description
The URL validation implementation is incorrect and always return valid for any string.
Current implementation:
final uri = Uri.tryParse(value);
if (uri != null && allowedSchemes != null) {
return allowedSchemes!.contains(uri.scheme);
}
return uri != null;But only checking url!=null is not sufficient since. URI.tryParse() does not return null for example, hello, iamnotavalidurl etc.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels