Allowed domains is hard-coded to check second level domains only

cds-snc / url-shortener

An API written in Python that shortens URLs

MIT License

4 stars 0 forks source link

Allowed domains is hard-coded to check second level domains only #363

Open cgye opened 1 year ago

cgye commented 1 year ago

Allowed domains is hard-coded to check second level domains only: here

This implementation will not work if allowed domains is configured with third level domains, e.g. x.gc.ca The implementation should follow the validation logic of email, which validates the entire domain.