is-absolute-url

Check if a URL is absolute

npm install is-absolute-url

importisAbsoluteUrlfrom'is-absolute-url';isAbsoluteUrl('https://sindresorhus.com/foo/bar');//=> trueisAbsoluteUrl('//sindresorhus.com');//=> falseisAbsoluteUrl('foo/bar');//=> falseisAbsoluteUrl('javascript:alert(1)');//=> falseisAbsoluteUrl('javascript:alert(1)',{httpOnly: false});//=> true

Type: string

The URL to check.

Type: object

Type: boolean
Default: true

Only allow HTTP(S) protocols.

When set to false, any valid absolute URL will be accepted, including potentially unsafe protocols like javascript:, ftp:, ws:, etc.

Warning: Setting httpOnly to false can pose security risks as it will return true for URLs with protocols like javascript:, vbscript:, data:, ftp:, ws:, etc. Only set this to false if you understand the implications and have appropriate safeguards in place.

See is-relative-url for the inverse.