diff --git a/src/MD_STD_IN.php b/src/MD_STD_IN.php index dafc430..f530c70 100644 --- a/src/MD_STD_IN.php +++ b/src/MD_STD_IN.php @@ -202,6 +202,11 @@ final class MD_STD_IN { throw new MDInvalidUrl("Invalid input URL"); } + // Check for valid schemes + if (MD_STD::startsWithAny($input, ['https://', 'http://', 'ftp://']) === false) { + throw new MDInvalidUrl("Invalid input URL"); + } + return $output; }