Skip to content

fix(config): reject malformed domain labels - #51

Merged
ralyodio merged 1 commit into
moshcoder:masterfrom
aiirvizionz:clientkit/reject-edge-dot-domains
Jul 30, 2026
Merged

fix(config): reject malformed domain labels#51
ralyodio merged 1 commit into
moshcoder:masterfrom
aiirvizionz:clientkit/reject-edge-dot-domains

Conversation

@aiirvizionz

Copy link
Copy Markdown
Contributor

Summary

  • reject tenant domains that start or end with a dot
  • reject labels that start or end with a hyphen
  • add focused safeDomain coverage for normal forwarded URLs and malformed label edges

Tests

  • node --test tests*.mjs

@ralyodio
ralyodio merged commit 9e5cf31 into moshcoder:master Jul 30, 2026
2 checks passed
ralyodio pushed a commit that referenced this pull request Jul 31, 2026
safeDomain accepted domains starting/ending with a dot and labels
starting/ending with a hyphen, which are invalid per RFC 1035 and can
cause unexpected URL construction. Reject both forms.

Fixes #51

Co-authored-by: qwenbona <qwenbona@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants