feat: Add validation for protocol

Author: relekang

src/__tests__/__snapshots__/api.tests.ts.snap

@@ -363,6 +363,33 @@ exports[`
 }
 `;
 
+exports[`
+  findFeed(url: "ftp://example.com") { link }
+ 1`] = `
+{
+  "data": null,
+  "errors": [
+    {
+      "extensions": {
+        "code": "invalid-url",
+        "message": "Invalid url",
+        "type": "InvalidUrlError",
+      },
+      "locations": [
+        {
+          "column": 3,
+          "line": 2,
+        },
+      ],
+      "message": "Invalid url",
+      "path": [
+        "findFeed",
+      ],
+    },
+  ],
+}
+`;
+
 exports[`
   findFeed(url: "https://non--------existing-domain.com") { link }
  1`] = `

src/__tests__/api.tests.ts

@@ -69,6 +69,10 @@ testGraphqlApi`
   findFeed(url: "not-a-url") { link }
 `;
 
+testGraphqlApi`
+  findFeed(url: "ftp://example.com") { link }
+`;
+
 testGraphqlApi`
   findFeed(url: "https://non--------existing-domain.com") { link }
 `;

src/handlers/feed.ts

@@ -55,7 +55,7 @@ export async function parseFromQuery({
 	endTime?: string;
 	startTime?: string;
 }): Promise<ParserResponse> {
-	if (!isUrl(url)) {
+	if (!/^https?/.test(url) || !isUrl(url)) {
 		throw new InvalidUrlError(url);
 	}
 	const response = await request(url);

src/handlers/findFeed.ts

@@ -3,7 +3,7 @@ import type { CheerioAPI } from "cheerio";
 import type { Element, Node } from "domhandler";
 import normalizeUrl from "normalize-url";
 
-import { BaseError, InvalidUrlError } from "../errors.js";
+import { InvalidUrlError } from "../errors.js";
 import { logger } from "../logger.js";
 import request from "../request.js";
 import { parseFromQuery, parseFromString } from "./feed.js";
@@ -90,18 +90,20 @@ async function findRssFeedsInDom(
 export async function findFeed({
 	url,
 	normalize = false,
+	withGuessFallback = false,
 }: {
 	url: string;
 	normalize?: boolean;
+	withGuessFallback?: boolean;
 }): Promise<FindFeedResponse[]> {
-	if (!isUrl(url)) {
+	if (!/^https?/.test(url) || !isUrl(url)) {
 		throw new InvalidUrlError(url);
 	}
 
 	const normalizedUrl = normalize ? url : normalizeUrl(url, normalizeOptions);
 
 	if (!normalizedUrl) {
-		throw new BaseError("Empty url is not allowed", "missing-url");
+		throw new InvalidUrlError(url);
 	}
 
 	const response = await request(normalizedUrl);