#18 problem fixed

yegor256 · Nov 15, 2016 · 30a989d · 30a989d
1 parent e8e118b
commit 30a989d
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/src/main/java/io/jare/tk/TkRelay.java b/src/main/java/io/jare/tk/TkRelay.java
@@ -81,7 +81,17 @@ public Response act(final Request req) throws IOException {
                 "parameter \"u\" is mandatory"
             );
         }
-        final URI uri = URI.create(param.next().trim());
+        final String target = param.next().trim();
+        if (!TkRelay.PTN.matcher(target).matches()) {
+            throw new HttpException(
+                HttpURLConnection.HTTP_BAD_REQUEST,
+                String.format(
+                    "target URL \"%s\" is not compliant with RFC3986",
+                    target
+                )
+            );
+        }
+        final URI uri = URI.create(target);
         final String host = uri.getHost().toLowerCase(Locale.ENGLISH);
         final Iterator<Domain> domains = this.base.domain(host);
         if (!domains.hasNext()) {