URI check only for http or https (#2915)

* URI check only for http or https * Update joiner.rb * Update joiner.rb * Update joiner.rb
2021-09-28 10:31:03 +09:00 · 2021-09-28 10:31:03 +09:00 · 42f4fcff5a
parent 6e804d550a
commit 42f4fcff5a
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/concerns/joiner.rb
+++ b/app/controllers/concerns/joiner.rb
@ -48,7 +48,7 @@ module Joiner
  end

  def valid_avatar?(url)
-    return false if URI.regexp.match(url).nil?
+    return false if URI.regexp(['http', 'https']).match(url).nil?
    uri = URI(url)
    http = Net::HTTP.new(uri.host, uri.port)
    http.use_ssl = true if uri.scheme == 'https'