Merge pull request #548 from codimd/fix/545-urls-with-credentials

Use URL constructor instead of regex to check for valid URL

public/js/extra.js

@@ -178,16 +178,11 @@ function slugifyWithUTF8 (text) {
 }
 
 export function isValidURL (str) {
-  const pattern = new RegExp('^(https?:\\/\\/)?' + // protocol
+  try {
-        '((([a-z\\d]([a-z\\d-]*[a-z\\d])*)\\.)+[a-z]{2,}|' + // domain name
+    const url = new URL(str)
-        '((\\d{1,3}\\.){3}\\d{1,3}))' + // OR ip (v4) address
+    return ['http:', 'https:'].includes(url.protocol)
-        '(\\:\\d+)?(\\/[-a-z\\d%_.~+]*)*' + // port and path
+  } catch (e) {
-        '(\\?[;&a-z\\d%_.~+=-]*)?' + // query string
-        '(\\#[-a-z\\d_]*)?$', 'i') // fragment locator
-  if (!pattern.test(str)) {
     return false
-  } else {
-    return true
   }
 }