feat: Validate Slack Webhook URL (#18)

kunalnagarco · Aug 14, 2021 · 71c0afe · 71c0afe
1 parent e81c996
commit 71c0afe
Show file tree

Hide file tree

Showing 4 changed files with 29 additions and 8 deletions.
diff --git a/dist/index.js b/dist/index.js
diff --git a/dist/index.js.map b/dist/index.js.map
diff --git a/src/destinations/slack.ts b/src/destinations/slack.ts
@@ -48,6 +48,13 @@ const createAlertBlock = (alert: Alert): KnownBlock => {
   }
 }
 
+export const validateSlackWebhookUrl = (url: string): boolean => {
+  const regexPattern = new RegExp(
+    /^https:\/\/hooks\.slack\.com\/services\/T[a-zA-Z0-9_]{10}\/B[a-zA-Z0-9_]{10}\/[a-zA-Z0-9_]{24}/,
+  )
+  return regexPattern.test(url)
+}
+
 export const sendAlertsToSlack = async (
   webhookUrl: string,
   alerts: Alert[],

diff --git a/src/main.ts b/src/main.ts
@@ -1,7 +1,7 @@
 import { getInput, setFailed } from '@actions/core'
+import { sendAlertsToSlack, validateSlackWebhookUrl } from './destinations'
 import { context } from '@actions/github'
 import { fetchAlerts } from './fetch-alerts'
-import { sendAlertsToSlack } from './destinations'
 
 async function run(): Promise<void> {
   try {
@@ -13,7 +13,11 @@ async function run(): Promise<void> {
     const alerts = await fetchAlerts(token, repo, owner, count)
     if (alerts.length > 0) {
       if (slackWebhookUrl) {
-        await sendAlertsToSlack(slackWebhookUrl, alerts)
+        if (!validateSlackWebhookUrl(slackWebhookUrl)) {
+          setFailed(new Error('Invalid Slack Webhook URL'))
+        } else {
+          await sendAlertsToSlack(slackWebhookUrl, alerts)
+        }
       }
     }
   } catch (err) {