diff --git a/package.json b/package.json index ad05d17a6..6c9357612 100644 --- a/package.json +++ b/package.json @@ -39,6 +39,7 @@ "@types/gulp-util": "3.0.30", "@types/inquirer": "0.0.32", "@types/is-root": "1.0.0", + "@types/is-url": "1.2.28", "@types/js-yaml": "3.5.29", "@types/mongodb": "2.1.36", "@types/ms": "0.7.29", @@ -95,6 +96,7 @@ "gulp-util": "3.0.8", "inquirer": "2.0.0", "is-root": "1.0.0", + "is-url": "1.2.2", "js-yaml": "3.7.0", "livescript": "1.5.0", "mime-types": "2.1.13", diff --git a/src/web/service/proxy/proxy.ts b/src/web/service/proxy/proxy.ts index 8a45f0853..48c9fa4a5 100644 --- a/src/web/service/proxy/proxy.ts +++ b/src/web/service/proxy/proxy.ts @@ -1,11 +1,12 @@ import * as URL from 'url'; import * as express from 'express'; import * as request from 'request'; +import * as isUrl from 'is-url'; module.exports = (req: express.Request, res: express.Response) => { const url = req.params.url; - if (!url) { + if (!url || !isUrl(url)) { return; }