more specific protocol validation

multiversx · Sep 30, 2024 · c16eb45 · c16eb45
1 parent de0243c
commit c16eb45
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/native.auth.server.ts b/src/native.auth.server.ts
@@ -376,7 +376,7 @@ export class NativeAuthServer {
       }
 
       const [protocol, domain] = components;
-      if (protocol !== '' && !protocol.includes('://')) {
+      if (protocol !== '' && !['https://', 'http://'].includes(protocol)) {
         throw new NativeAuthInvalidWildcardOriginError();
       }