🐛 Bug Report: validation for callback URLs too strict for port #3

Open
opened 2025-10-06 23:57:58 +03:00 by OVERLORD · 0 comments
Owner

Originally created by @RobSlgm on GitHub.

Reproduction steps

Add a callback URL such as http://localhost:*

Expected behavior

The placeholder * should be valid for the port part of the URL.

#929 added a validation. Unfortunately the implementation simply replaces '*' with '+' and checks the URI syntax, which fails in the port part.

Actual Behavior

Input is rejected with 'Invalid redirect URL?

Pocket ID Version

1.12.0

Workaround

Use http://localhost*, but it offers less restriction than http://localhost:*

Originally created by @RobSlgm on GitHub. ### Reproduction steps Add a callback URL such as `http://localhost:*` ### Expected behavior The placeholder `*` should be valid for the port part of the URL. #929 added a validation. Unfortunately the implementation simply replaces '*' with '+' and checks the URI syntax, which fails in the port part. ### Actual Behavior Input is rejected with 'Invalid redirect URL? ### Pocket ID Version 1.12.0 ### Workaround Use `http://localhost*`, but it offers less restriction than `http://localhost:*`
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id#3