mirror of
https://github.com/pocket-id/pocket-id.git
synced 2025-12-06 09:13:19 +03:00
🐛 Bug Report: validation for callback URLs too strict for port #3
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @RobSlgm on GitHub.
Reproduction steps
Add a callback URL such as
http://localhost:*Expected behavior
The placeholder
*should be valid for the port part of the URL.#929 added a validation. Unfortunately the implementation simply replaces '*' with '+' and checks the URI syntax, which fails in the port part.
Actual Behavior
Input is rejected with 'Invalid redirect URL?
Pocket ID Version
1.12.0
Workaround
Use
http://localhost*, but it offers less restriction thanhttp://localhost:*