#1471: WebDAV url validation

app/scripts/storage/impl/storage-webdav.js

@@ -13,7 +13,14 @@ class StorageWebDav extends StorageBase {
     getOpenConfig() {
         return {
             fields: [
-                { id: 'path', title: 'openUrl', desc: 'openUrlDesc', type: 'text', required: true },
+                {
+                    id: 'path',
+                    title: 'openUrl',
+                    desc: 'openUrlDesc',
+                    type: 'text',
+                    required: true,
+                    pattern: '^https:'
+                },
                 {
                     id: 'user',
                     title: 'openUser',

release-notes.md

@@ -4,6 +4,7 @@ Release notes
 `+` #557: Argon2 speed improvements in desktop apps  
 `+` #1400: auto-apply tag when creating new entry in tag view  
 `+` #1342: hint that the data will be stored in unencrypted form after exporting  
+`*` #1471: WebDAV url validation, only HTTPS is allowed  
 `-` fix #1463: copying the original url instead of adding https:  
 
 ##### v1.14.0 (2020-04-18)