Ensure `urlskip=` redirects only to `https:`

This commit is contained in:
Raymond Hill 2024-10-16 08:25:56 -04:00
parent 94ca27acd1
commit 32f27c5131
No known key found for this signature in database
GPG Key ID: 25E1490B761470C2
1 changed files with 2 additions and 1 deletions

View File

@ -5508,7 +5508,8 @@ function urlSkip(directive, url, steps) {
// Unknown directive
return;
}
void new URL(urlout);
const urlfinal = new URL(urlout);
if ( urlfinal.protocol !== 'https:' ) { return; }
return urlout;
} catch(x) {
}