Reject URLs that are protocol only, closes #642

CHANGELOG.md

@@ -2,6 +2,8 @@
 
 - `isURL()` now requires the `require_tld: false` option to validate `localhost`
   ([#675](https://github.com/chriso/validator.js/issues/675))
+- `isURL()` now rejects URLs that are protocol only
+  ([#642](https://github.com/chriso/validator.js/issues/642))
 
 #### 7.2.0
 

lib/isURL.js

@@ -87,6 +87,10 @@ function isURL(url, options) {
   }
   url = split.join('://');
 
+  if (url === '') {
+    return false;
+  }
+
   split = url.split('/');
   url = split.shift();
 

src/lib/isURL.js

@@ -61,6 +61,10 @@ export default function isURL(url, options) {
   }
   url = split.join('://');
 
+  if (url === '') {
+    return false;
+  }
+
   split = url.split('/');
   url = split.shift();
 

test/validators.js

@@ -325,6 +325,7 @@ describe('Validators', function () {
       ],
       invalid: [
         'http://foobar.com',
+        'file://',
       ],
     });
   });

validator.js

@@ -364,6 +364,10 @@ function isURL(url, options) {
   }
   url = split.join('://');
 
+  if (url === '') {
+    return false;
+  }
+
   split = url.split('/');
   url = split.shift();