Ensure urlskip= redirects only to https:

gorhill · Oct 16, 2024 · 32f27c5 · 32f27c5
1 parent 94ca27a
commit 32f27c5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/js/static-net-filtering.js b/src/js/static-net-filtering.js
@@ -5508,7 +5508,8 @@ function urlSkip(directive, url, steps) {
             // Unknown directive
             return;
         }
-        void new URL(urlout);
+        const urlfinal = new URL(urlout);
+        if ( urlfinal.protocol !== 'https:' ) { return; }
         return urlout;
     } catch(x) {
     }