Function sanitizeLogoUrl

public/js/adminPanel.js:550–581

(raw)

    if (!logoImg) return;

    const sanitizeLogoUrl = (raw) => {
      let url = (raw || '').trim();
      if (!url) return '';

      // If they used a bare "uploads/..." path, normalize to "/uploads/..."
      if (!url.startsWith('/') && url.startsWith('uploads/')) {
        url = '/' + url;
      }

      const legacyMatch = url.match(/\/uploads\/profile_pics\/([^?#]+)/);
      if (legacyMatch && legacyMatch[1]) {
        let legacyName = legacyMatch[1];
        try { legacyName = decodeURIComponent(legacyName); } catch (e) {}
        url = `/api/public/profilePic.php?file=${encodeURIComponent(legacyName)}`;
      }

      // Strip any CR/LF just in case
      url = url.replace(/[\r\n]+/g, '');

      if (url.startsWith('/')) {
        if (url.includes('://')) return '';
        return withBase(url);
      }

      try {
        const parsed = new URL(url);
        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') return '';
        return parsed.toString();
      } catch (e) {
        return '';
      }
    };

    const safeUrl = sanitizeLogoUrl((input && input.value) || '');