fix(core): add trim url validation (#198)

Author: dolcalmi

core/api/src/graphql/admin/types/scalar/external-url.ts

@@ -21,6 +21,10 @@ const ExternalUrl = GT.Scalar({
 })
 
 function validUrlValue(value: string) {
+  if (value !== value.trim()) {
+    return new InputValidationError({ message: "Invalid value for ExternalUrl" })
+  }
+
   try {
     const url = new URL(value)
     if (url.protocol !== "https:" && url.protocol !== "http:") {

core/api/src/graphql/public/types/scalar/endpoint-url.ts

@@ -21,6 +21,10 @@ const EndpointUrl = GT.Scalar({
 })
 
 function validUrlValue(value: string) {
+  if (value !== value.trim()) {
+    return new InputValidationError({ message: "Invalid value for EndpointUrl" })
+  }
+
   try {
     const url = new URL(value)
     if (url.protocol !== "https:" && url.protocol !== "http:") {