[Fix] Update sanitize_shop_domain to handle nil host

Shopify / shopify_app

A Rails Engine for building Shopify Apps

MIT License

1.74k stars 683 forks source link

Closed lizkenyon closed 1 month ago

lizkenyon commented 1 month ago

When javascript:alert(1) is used the host is nil not empty
This was causing the code to crash in unified_admin where we would attempt to split uri.host

Before submitting the PR, please consider if any of the following are needed: