resolve xxs attack

McSam · McSam · commit 20001e7ca8cd · 2019-06-26T10:28:23.000+08:00
diff --git a/src/indexPage/endpoint.js b/src/indexPage/endpoint.js
@@ -20,6 +20,8 @@ export default function endpoint() {
         $('#new_endpoint').click(addEndpoint);
         $('#reset').click(resetEndpoint);
 
+        $('#server_url').keyup(validateURL);
+
         init();
     });
     return true;
@@ -64,10 +66,21 @@ function addEndpoint(e) {
     setStorage('config.server_url', serverUrl);
     setStorage('config.app_id', appId);
 
+    const UrlReg = /^(?:http(s)?:\/\/)?[\w.-]+(?:\.[\w\.-]+)+[\w\-\._~:/?#[\]@!\$&'\(\)\*\+,;=.]+$/;
+
+    if (!UrlReg.test(serverUrl)) {
+        $('#error')
+            .html('Please enter a valid server URL')
+            .show();
+        return;
+    }
+
     checkConnection(appId, serverUrl);
 }
 
 function resetEndpoint() {
     setStorage('config.app_id', getDefaultEndpoint().appId);
     setStorage('config.server_url', getDefaultEndpoint().url);
 }
+
+const validateURL = e => {};
