From 23d49a47d21be2a4f93c3428d374fae0d344447f Mon Sep 17 00:00:00 2001
From: xemeds <xemeds@protonmail.com>
Date: Thu, 23 Jul 2020 16:57:16 +0000
Subject: [PATCH] Improved the URL validator

---
 tiny0/database.db | Bin 12288 -> 12288 bytes
 tiny0/forms.py    |   5 +++++
 2 files changed, 5 insertions(+)

diff --git a/tiny0/database.db b/tiny0/database.db
index 28be301c47ee3cabef5dc662de53da2505c23873..8bcab84459d4cfaf72fbfc227dcdaee3c173d059 100644
GIT binary patch
delta 673
zcmX|;zi-n(6vv$(ZJNaR(XAB;vOow?Dd*IQL$C)#qNX&pB0?HfL=3H~^EEhb5@W?;
zayJ$RDklB`78X!vBqla?#Ed}f`~kdceLbCRef2)icklZ>Jvcphdn468E45eK5_$OJ
znj}eSP$igwdcJ!7lk!f5UnN<YNbnoJ!AE!v6xwhPa>`%ji*lw+KF@6>zAa~^vbEiD
zUOXM|zdR1ZnW<^dX)tw;r!_yI3vx8|H;M@DymAJ0T5os>q*IsIH0rv##g}fGrfF>y
zINRNu+fLXr64u3vc>yKg=%Tljj}fj67xhW=@bO^+o4QMh&UB`(VAW^^e!oc@6>+S)
zAUa_IZp&KBA#rCk-mLEX-bD0U775g4-rETqqnX=kiOS_Q@QvN-5)!d-)MIw!?GD86
zS)}PKVuazkl||&imNySOyCXXxSS^T1P-7ZCxYskt-0erhXT2xgYQkt*!z1IHX)J9H
z>vm{VPIj&i&=-zRj3A_IsqB5c{$P8r+3!7au6hY|3z()1RD$>L9nLYi7=FS(_ycd?
z1AK)56W)SY&XiLkI++U*QIQLgL4gb5ah?ld=?WLZy&M<9uw^cUHA`Fw7qVPjj$7(h
PGhB%Y)5T0VFQ)kq#yqiI

delta 64
zcmZojXh@hK&1gPR##zvuLC^UxF9QPu6Tboje*wS3W<`Y!e3KRUpD-~90NF156C1X%
JaRC(|xB&CD52647

diff --git a/tiny0/forms.py b/tiny0/forms.py
index 49005a0..dee4707 100644
--- a/tiny0/forms.py
+++ b/tiny0/forms.py
@@ -19,6 +19,11 @@ def validate_URL(form, field):
 		# Raise a ValidationError
 		raise ValidationError("Invalid URL")
 
+	# If the url starts with a slash after http:// or after https:// or just starts with a slash
+	if field.data.startswith("http:///") or field.data.startswith("https:///") or field.data.startswith("/"):
+		# Raise a ValidationError
+		raise ValidationError("Invalid URL")
+
 	# If the url ends with a dot and it is the only dot
 	if field.data.endswith(".") and field.data.count(".") == 1:
 		# Raise a ValidationError