fix: add strict URL validation with consistent error message (calcom#22843)

sahitya-chandra · anikdhabal · pallava-joshi · commit 4b03fd3a9e8e · 2025-08-09T00:00:51.000+05:30
* added strict url validation with consistent Invalid URL error message

* chore

* Update schema.ts

---------

Co-authored-by: Anik Dhabal Babu &lt;81948346+anikdhabal@users.noreply.github.com&gt;
diff --git a/packages/features/form-builder/schema.ts b/packages/features/form-builder/schema.ts
@@ -418,9 +418,12 @@ export const fieldTypesSchemaMap: Partial<
       }
 
       // 2. If it failed, try prepending https://
-      const valueWithHttps = `https://${value}`;
-      if (urlSchema.safeParse(valueWithHttps).success) {
-        return;
+      const domainLike = /^[a-z0-9.-]+\.[a-z]{2,}(\/.*)?$/i;
+      if (domainLike.test(value)) {
+        const valueWithHttps = `https://${value}`;
+        if (urlSchema.safeParse(valueWithHttps).success) {
+          return;
+        }
       }
 
       // 3. If all attempts fail, throw err

Original file line number	Diff line number	Diff line change
`@@ -418,9 +418,12 @@ export const fieldTypesSchemaMap: Partial<`
`418`	`418`	`}`
`419`	`419`
`420`	`420`	`// 2. If it failed, try prepending https://`
`421`		- const valueWithHttps = `https://${value}`;
`422`		`- if (urlSchema.safeParse(valueWithHttps).success) {`
`423`		`- return;`
	`421`	`+ const domainLike = /^[a-z0-9.-]+\.[a-z]{2,}(\/.*)?$/i;`
	`422`	`+ if (domainLike.test(value)) {`
	`423`	+ const valueWithHttps = `https://${value}`;
	`424`	`+ if (urlSchema.safeParse(valueWithHttps).success) {`
	`425`	`+ return;`
	`426`	`+ }`
`424`	`427`	`}`
`425`	`428`
`426`	`429`	`// 3. If all attempts fail, throw err`