
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
http_url_validation_improved
Advanced tools
HTTP URL Validation Plugin Improved by Erik Gregg, Walter McGinnis, Kieran Pilkington
This work is based on Erik's work, but mainly refined for the Kete application (http://kete.net.nz).
HTTP URL Validation Improved is a Rails gem that allows you to validate a URL entered in a form. It validates if the URL exists by hitting it with a HEAD request.
The improved version includes retries for common patterns when the head request is refused before giving a failure notice.
It also looks up a SITE_URL constant to the user agent in the headers.
There's also the option to also check that the URL returns content of a specified type. Here’s how you can use it your model:
Check for content type: validates_http_url :url, :content_type => "text/html"
Do not check for content type, just make sure the site is accessible: validates_http_url :website
Make sure there is a DNS entry for a domain validates_http_domain :domain
This example will make sure the value entered for the URL field points to a publicly accessible HTML page, and the photo field points to an image: validates_http_url :image_url, :content_type => "image"
========================
Bug reports and feedback are always welcome.
Please report them via http://github.com/kete/http_url_validation_improved
FAQs
Unknown package
We found that http_url_validation_improved demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.