From 42ccc180029523bea82a1bd0d0025bdee62cba86 Mon Sep 17 00:00:00 2001 From: Daan Sprenkels Date: Wed, 22 Apr 2020 16:11:32 +0200 Subject: [PATCH] User url.Parse instead of url.ParseRequestURI url.ParseRequestURI assumes the URL does not contain a fragment identifier. However, this is not disallowed. So we should use url.Parse instead. Related issue: #45 --- handlers.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/handlers.go b/handlers.go index bd07c9c..ff9d680 100644 --- a/handlers.go +++ b/handlers.go @@ -265,7 +265,7 @@ func (rl *rushlink) newPasteHandlerURLEncoded(w http.ResponseWriter, r *http.Req } func (rl *rushlink) newRedirectPasteHandler(w http.ResponseWriter, r *http.Request, rawurl string) { - userURL, err := url.ParseRequestURI(rawurl) + userURL, err := url.Parse(rawurl) if err != nil { msg := fmt.Sprintf("invalid url (%v): %v", err, rawurl) rl.renderError(w, r, http.StatusBadRequest, msg)