medplum / medplum / 23352951493

92%

main: 92%

Build Type

push

github

Committed by web-flow

Commit Message

Fixes #4365 Fixes #8673 - DomainConfiguration rules on external apps (#8708)

* Fixes #4365 Fixes #8673 - DomainConfiguration rules on external apps

Signed-off-by: Cody Ebberson <cody@ebberson.com>

* Tests

Signed-off-by: Cody Ebberson <cody@ebberson.com>

* Fix URL validation security issue and add domain confusion test

- Replace string startsWith() with proper URL-based comparison
- Validate protocol, hostname, port, and path separately
- Add test case for domain confusion attack prevention

Co-authored-by: Cody Ebberson <codyebberson@users.noreply.github.com>

* PR feedback

Signed-off-by: Cody Ebberson <cody@ebberson.com>

---------

Signed-off-by: Cody Ebberson <cody@ebberson.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Cody Ebberson <codyebberson@users.noreply.github.com>

Coverage Stats

17906 of 20333 branches covered (88.06%)

Branch coverage included in aggregate %.

16 of 18 new or added lines in 1 file covered. (88.89%)

4 existing lines in 1 file now uncovered.

32534 of 34367 relevant lines covered (94.67%)

14564.53 hits per line