diff options
| author | Stan Hu <stanhu@gmail.com> | 2018-12-08 23:23:39 -0800 |
|---|---|---|
| committer | Stan Hu <stanhu@gmail.com> | 2018-12-09 07:59:54 -0800 |
| commit | 401be1d17fb839f68358581c0c74560bd4a24f8f (patch) | |
| tree | 9d6df7b3beffee066709ed820214d019997f3560 /lib/gitlab/url_sanitizer.rb | |
| parent | 7cb0dd98590e8fdd7483b9f61643a0daa23c2b67 (diff) | |
| download | gitlab-ce-401be1d17fb839f68358581c0c74560bd4a24f8f.tar.gz | |
Only allow strings in URL::Sanitizer.valid?
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/55079
Diffstat (limited to 'lib/gitlab/url_sanitizer.rb')
| -rw-r--r-- | lib/gitlab/url_sanitizer.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/gitlab/url_sanitizer.rb b/lib/gitlab/url_sanitizer.rb index 035268bc4f2..880712de5fe 100644 --- a/lib/gitlab/url_sanitizer.rb +++ b/lib/gitlab/url_sanitizer.rb @@ -14,6 +14,7 @@ module Gitlab def self.valid?(url) return false unless url.present? + return false unless url.is_a?(String) uri = Addressable::URI.parse(url.strip) |