fix: more strict regex/host name checks (#518)

SmartBear · Jan 17, 2025 · c1c1bea · c1c1bea
1 parent 90d6a8c
commit c1c1bea
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/config/index.js b/src/config/index.js
@@ -21,9 +21,10 @@ const setConfig = update => {
 
 const isURLValid = () => {
   const { SWAGGERHUB_URL } = getConfig()
+  const url = new URL(SWAGGERHUB_URL)
   return swaggerhubUrlRegex.test(SWAGGERHUB_URL) ||
-   (!SWAGGERHUB_URL.includes('api.swaggerhub.com') && SWAGGERHUB_URL.endsWith('/v1')) ||
-   SWAGGERHUB_URL.includes('localhost')
+      (!url.hostname.endsWith('api.swaggerhub.com') && url.pathname.endsWith('/v1')) ||
+      url.hostname === 'localhost'
 }
 
 module.exports = {