Added detection for invalid web app URL.

erickoledadevrel · Aug 28, 2023 · e27a6fc · e27a6fc
1 parent 1ba3464
commit e27a6fc
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/apps-script/packs.ts b/apps-script/packs.ts
@@ -6,6 +6,7 @@ import { ScriptSchema } from "./schemas";
 const DefaultRequestMethod = "GET";
 const SupportedRequestMethods = ["GET", "POST"];
 const DefaultRequestContentType = "text/plain";
+const WebAppUrlRegex = new RegExp("^https://script.google.com/(a/)?macros/([^/]+/)?s/([^/]+)/exec");
 
 export const pack = coda.newPack();
 
@@ -123,6 +124,9 @@ pack.addFormula({
     if (!SupportedRequestMethods.includes(method)) {
       throw new coda.UserVisibleError(`Invalid method: ${method}`);
     }
+    if (!url || !url.match(WebAppUrlRegex)) {
+      throw new coda.UserVisibleError(`Invalid web app URL: ${url}`);
+    }
     if (parameters) {
       let parsed;
       try {