webpush: enforce endpoint as a URL

2026-02-23 14:06:58 +01:00 · 2024-10-12 22:58:29 -05:00
parent 3fa12e3ba5
commit b6925a5491
1 changed files with 1 additions and 1 deletions
--- a/src/controllers/api/push.ts
+++ b/src/controllers/api/push.ts
@@ -9,7 +9,7 @@ import { getTokenHash } from '@/utils/auth.ts';

 const pushSubscribeSchema = z.object({
  subscription: z.object({
-    endpoint: z.string(),
+    endpoint: z.string().url(),
    keys: z.object({
      p256dh: z.string(),
      auth: z.string(),