- First commit to issue fork.
- 🇺🇸United States dcam
I did additional testing.
If the URL input accepts a second URL, then I think the natural next step is to wonder if it accepts any input after the URL. It does! Try entering any garbage text after a URL. It can be saved with no problem. So this issue isn't specifically about a "second URL."
Then it follows that one should wonder "How much invalid input does this actually accept?" It turns out that you can enter anything after the URL scheme and it will pass validation.
All this means that @quietone's instincts were initially correct and this issue is a duplicate of 🐛 Insufficient link validation for external URLs in link widget Needs work .
- 🇺🇸United States dcam
Granting credit to the major issue triage contributors from Amsterdam 2019.