Ensure urlskip= redirects only to https:

This commit is contained in:
Raymond Hill 2024-10-16 08:25:56 -04:00
parent 94ca27acd1
commit 32f27c5131
No known key found for this signature in database
GPG key ID: 25E1490B761470C2

View file

@ -5508,7 +5508,8 @@ function urlSkip(directive, url, steps) {
// Unknown directive
return;
}
void new URL(urlout);
const urlfinal = new URL(urlout);
if ( urlfinal.protocol !== 'https:' ) { return; }
return urlout;
} catch(x) {
}