andwati/dokploy
1
0
Fork 0
mirror of https://github.com/andwati/dokploy.git synced 2026-10-29 08:12:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor: implement safe URL validation for whitelabeling settings in both client and server schemas

Browse Source
This commit is contained in:
Mauricio Siu
2026-03-10 00:55:01 -06:00
parent 33532d3cf7
commit 2e03cf3d48
3 changed files with 24 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/server/src/db/schema/web-server-settings.ts
+12 -5
View File
@@ -187,16 +187,23 @@ export const apiUpdateDockerCleanup = z.object({
});
// Whitelabeling validation schemas
const safeUrl = z
.string()
.refine((url) => /^https?:\/\//i.test(url), {
message: "Only http:// and https:// URLs are allowed",
})
.nullable();
export const whitelabelingConfigSchema = z.object({
appName: z.string().nullable(),
appDescription: z.string().nullable(),
logoUrl: z.string().nullable(),
faviconUrl: z.string().nullable(),
logoUrl: safeUrl,
faviconUrl: safeUrl,
primaryColor: z.string().nullable(),
customCss: z.string().nullable(),
loginLogoUrl: z.string().nullable(),
supportUrl: z.string().nullable(),
docsUrl: z.string().nullable(),
loginLogoUrl: safeUrl,
supportUrl: safeUrl,
docsUrl: safeUrl,
errorPageTitle: z.string().nullable(),
errorPageDescription: z.string().nullable(),
metaTitle: z.string().nullable(),