summaryrefslogtreecommitdiff
path: root/packages/backend/src/misc
diff options
context:
space:
mode:
authorpiuvas <piuvas@proton.me>2025-04-19 23:04:48 -0300
committerpiuvas <piuvas@proton.me>2025-04-19 23:04:48 -0300
commit6a775127379c5534fd3e0f664f5039d77717ab59 (patch)
tree73cc57564f5cb6611cc2fcb2649e693ebb6b921a /packages/backend/src/misc
parentmerge: fix: friendlycaptcha always failing (!963) (diff)
downloadsharkey-6a775127379c5534fd3e0f664f5039d77717ab59.tar.gz
sharkey-6a775127379c5534fd3e0f664f5039d77717ab59.tar.bz2
sharkey-6a775127379c5534fd3e0f664f5039d77717ab59.zip
refactor link verification.
Diffstat (limited to 'packages/backend/src/misc')
-rw-r--r--packages/backend/src/misc/verify-field-link.ts32
1 files changed, 32 insertions, 0 deletions
diff --git a/packages/backend/src/misc/verify-field-link.ts b/packages/backend/src/misc/verify-field-link.ts
new file mode 100644
index 0000000000..9f9a37d655
--- /dev/null
+++ b/packages/backend/src/misc/verify-field-link.ts
@@ -0,0 +1,32 @@
+/*
+* SPDX-FileCopyrightText: piuvas and other Sharkey contributors
+* SPDX-License-Identifier: AGPL-3.0-only
+*/
+
+import { JSDOM } from 'jsdom';
+import { HttpRequestService } from '@/core/HttpRequestService.js';
+import { safeForSql } from './safe-for-sql.js';
+
+
+export async function verifyFieldLink(field_url: string, profile_url: string, httpRequestService: HttpRequestService): Promise<boolean | undefined> {
+ if (!safeForSql(field_url)) return;
+
+ try {
+ const html = await httpRequestService.getHtml(field_url);
+
+ const { window } = new JSDOM(html);
+ const doc: Document = window.document;
+
+ const aEls = Array.from(doc.getElementsByTagName('a'));
+ const linkEls = Array.from(doc.getElementsByTagName('link'));
+
+ const includesProfileLinks = [...aEls, ...linkEls].some(link => link.rel === 'me' && link.href === profile_url);
+
+ window.close();
+
+ return includesProfileLinks;
+ } catch (err) {
+ // なにもしない
+ return;
+ }
+}