diff --git a/src/backend/src/services/PuterHomepageService.js b/src/backend/src/services/PuterHomepageService.js index a1a7b4b6e0..72b258c125 100644 --- a/src/backend/src/services/PuterHomepageService.js +++ b/src/backend/src/services/PuterHomepageService.js @@ -192,18 +192,20 @@ class PuterHomepageService extends BaseService { const bundled = env != 'dev' || use_bundled_gui; + let validated_social_media_image = social_media_image; + // if social media image is not a valid absolute URL, set it to null - if (social_media_image && !is_valid_url(social_media_image)) { - social_media_image = null; + if (validated_social_media_image && !is_valid_url(validated_social_media_image)) { + validated_social_media_image = null; } // social media image must end with a valid image extension - if (social_media_image && !/\.(png|jpg|jpeg|gif|webp)$/.test(social_media_image.toLowerCase())) { - social_media_image = null; + if (validated_social_media_image && !/\.(png|jpg|jpeg|gif|webp)$/.test(validated_social_media_image.toLowerCase())) { + validated_social_media_image = null; } // set social media image to default if it is not valid - const social_media_image_url = social_media_image || `${asset_dir}/images/screenshot.png`; + const social_media_image_url = validated_social_media_image || `${asset_dir}/images/screenshot.png`; // Custom script tags to be added to the homepage by extensions // an event is emitted to allow extensions to add their own script tags