From 6b8265fb17f61a560bbce4dd4ec8556f4a2a5682 Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 26 Oct 2025 00:55:30 -0400 Subject: [PATCH] fix validation of web push URLs They are validated by test message, but it would have been possible to add an http url. If an http url was added, it's still possible to remove it via NS PUSH DELETE. --- irc/handlers.go | 1 + 1 file changed, 1 insertion(+) diff --git a/irc/handlers.go b/irc/handlers.go index b17d094b..c56ce87f 100644 --- a/irc/handlers.go +++ b/irc/handlers.go @@ -3934,6 +3934,7 @@ func webpushHandler(server *Server, client *Client, msg ircmsg.Message, rb *Resp if err := webpush.SanityCheckWebPushEndpoint(endpoint); err != nil { rb.Add(nil, server.name, "FAIL", "WEBPUSH", "INVALID_PARAMS", subcommand, client.t("Invalid web push URL")) + return false } switch subcommand {