magento
Introduction of url route validator Magento\Framework\Url\RouteValidator
Problem
Validating a url route in M2 is not currently possible. The problem occurred during Domain Whitelist for Configurable 3rd Party Redirects. We just don't have a service class to validate paths, for code re-usage, with that can be injected in all resolvers or classes that need this validator such as PayPal Express and others.
path:"some/path" //validated path
//returns
{
path: "http://magento.com/some/path"
}
Solution
As this validator doesn't have anything to do with GraphQl, the best place for it is to add a new validator in framework
similar to existing \Magento\Framework\Url\Validator. So this new class in framework will need approval.
Looking at the implementation of the \Magento\Framework\Url\Validator it's based on \Zend_Validate_Abstract so it
complies with our standard of not using native php functions such as parse parse_url. Nor we would want to use regex.
Requested Reviewers
@melnikovi
@cpartica Also please make sure the validator rejects path starting with javascript:/data: etc. since 1. they are not useable as redirects. 2. Potentially these URLs maybe used in templates/email templates
