Pandore/homarr
Public Access
1
0 Fork 0
Code Actions Activity

Merge branch 'dev' into feat/homarr-assistant

Browse Source
This commit is contained in:
Thomas authored and GitHub committed 2026-08-06 21:53:57 +02:00
2 parents eca8b4286d f76a0f240a
commit bc12aba433
13 files changed
+92 -89
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

packages/validation/src/app.ts
+1 -6
View File
@@ -3,12 +3,7 @@ import { z } from "zod/v4";
export const appHrefSchema = z
.string()
.trim()
.url()
.regex(/^(?!javascript)[a-zA-Z]*:\/\//i) // javascript: is not allowed, i for case insensitive (so Javascript: is also not allowed)
.or(z.string().trim().includes("[homarr_base]"))
.or(z.string().trim().includes("[homarr_hostname]"))
.or(z.string().trim().includes("[homarr_domain]"))
.or(z.string().trim().includes("[homarr_protocol]"))
.refine((val) => !/^javascript:/i.test(val), "JavaScript URIs are not permitted")
.or(z.literal(""))
.transform((value) => (value.length === 0 ? null : value))
.nullable();