Fixes #36919 - Add URL validation to HTTP Proxy URL field.

theforeman · Nov 14, 2023 · e629d12 · e629d12
1 parent 65f2a01
commit e629d12
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/models/http_proxy.rb b/app/models/http_proxy.rb
@@ -34,6 +34,7 @@ class HttpProxy < ApplicationRecord
 
   def full_url
     uri = URI(url)
+    fail URI::InvalidURIError unless uri.is_a?(URI::HTTP)
     if username.present?
       uri.user = CGI.escape(username)
       uri.password = CGI.escape(password) if password