support: further sanitize contributor data

npm · Sep 6, 2019 · 6f944dd · 6f944dd
1 parent 9415ba0
commit 6f944dd
Showing 1 changed file with 17 additions and 1 deletion.
diff --git a/lib/support.js b/lib/support.js
@@ -129,7 +129,23 @@ function downloadSupportData (supportablePackages, cb) {
                 })
               }
               contributorData.url = contributor.url
-              done(null, contributorData)
+              var result = {
+                name: contributorData.name,
+                type: contributorData.type,
+                url: contributor.url
+              }
+              if (looksLikeURL(contributorData.homepage)) {
+                result.homepage = contributorData.homepage
+              }
+              if (
+                Array.isArray(contributorData.links) &&
+                contributorData.links.every(function (element) {
+                  return looksLikeURL(element)
+                })
+              ) {
+                result.links = contributorData.links
+              }
+              done(null, result)
             })
           }
         }), 5, function (error, resolvedContributors) {