Git-Mirrors/onionshare
1
0
Fork 0
mirror of https://github.com/onionshare/onionshare.git synced 2025-08-10 07:10:31 -04:00
Code Issues Projects Releases Packages Wiki Activity

Potential fix for code scanning alert no. 11: Incomplete URL substring sanitization

Browse source 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
mig5 2025-02-07 11:53:46 +11:00 • committed by GitHub
parent c1e7085e4e
commit b6ade040ee
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
flatpak/golang-to-requirements.py
View file

@ -12,6 +12,7 @@ import tempfile
import yaml import yaml
import requests import requests
from bs4 import BeautifulSoup from bs4 import BeautifulSoup
from urllib.parse import urlparse
def parse_args(): def parse_args():
@ -147,16 +148,15 @@ def get_git_url(module_name):
module_name = re.sub(r"/v\d+$", "", module_name) module_name = re.sub(r"/v\d+$", "", module_name)
# Remove the subdirectory, if present (e.g. github.com/foo/bar/subdir -> github.com/foo/bar) # Remove the subdirectory, if present (e.g. github.com/foo/bar/subdir -> github.com/foo/bar)
if "gitlab.com" in module_name or "github.com" in module_name: from urllib.parse import urlparse
url_parts = module_name.split("/") parsed_url = urlparse(f"https://{module_name}")
if len(url_parts) > 3: hostname = parsed_url.hostname
module_name = "/".join(url_parts[:3])
if "gitlab.com" in module_name: if hostname == "gitlab.com":
return f"https://gitlab.com/{module_name.replace('gitlab.com/', '')}" return f"https://gitlab.com/{module_name.replace('gitlab.com/', '')}"
elif "github.com" in module_name: elif hostname == "github.com":
return f"https://github.com/{module_name.replace('github.com/', '')}" return f"https://github.com/{module_name.replace('github.com/', '')}"
elif "git.torproject.org" in module_name: elif hostname == "git.torproject.org":
return f"https://{module_name}" return f"https://{module_name}"
else: else:
response = requests.get(f"https://{module_name}/?go-get=1") response = requests.get(f"https://{module_name}/?go-get=1")