From 2581f20ebffc923ebb6c3632492fb40574aa4ef3 Mon Sep 17 00:00:00 2001 From: Dorian Date: Wed, 4 Mar 2026 22:18:00 +0000 Subject: [PATCH] fix(app): add URL length limit (2048 chars) to extractUrlFromText Prevents processing excessively long URLs in content extraction. Co-Authored-By: Claude Opus 4.6 --- packages/app/src/composables/contentExtraction.ts | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/app/src/composables/contentExtraction.ts b/packages/app/src/composables/contentExtraction.ts index 4c1761d1..5a93c8c5 100644 --- a/packages/app/src/composables/contentExtraction.ts +++ b/packages/app/src/composables/contentExtraction.ts @@ -27,8 +27,10 @@ function extractUrlFromText(text: string): string | undefined { const mdLink = /\[([^\]]*)\]\((https?:\/\/[^)]+)\)/.exec(text) const raw = mdLink ? mdLink[2] : (/(https?:\/\/[^\s)\]"'<>]+)/.exec(text)?.[1]) if (!raw?.trim()) return undefined + const trimmed = raw.trim() + if (trimmed.length > 2048) return undefined try { - const u = new URL(raw.trim()) + const u = new URL(trimmed) if (!/^https?:$/i.test(u.protocol)) return undefined return u.href } catch {