1 files changed, 8 insertions, 0 deletions
diff --git a/lib/gitlab/manifest_import/manifest.rb b/lib/gitlab/manifest_import/manifest.rb
index 7208fe5bbc5..618ddf37b88 100644
--- a/lib/gitlab/manifest_import/manifest.rb
+++ b/lib/gitlab/manifest_import/manifest.rb
@@ -47,6 +47,10 @@ module Gitlab
           @errors << 'Make sure every <project> tag has name and path attributes.'
         end
 
+        unless validate_scheme
+          @errors << 'Make sure the url does not start with javascript'
+        end
+
         @errors.empty?
       end
 
@@ -64,6 +68,10 @@ module Gitlab
         end
       end
 
+      def validate_scheme
+        remote !~ /\Ajavascript/i
+      end
+
       def repository_url(name)
         Gitlab::Utils.append_path(remote, name)
       end