From 6ae7661603f7b9e7491c92eb8ed2df757ca45d64 Mon Sep 17 00:00:00 2001
From: zadam <zadam.apps@gmail.com>
Date: Wed, 2 Aug 2023 23:23:31 +0200
Subject: [PATCH] note path validation

---
 src/public/app/services/link.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/public/app/services/link.js b/src/public/app/services/link.js
index 6608460ca..c859b84cf 100644
--- a/src/public/app/services/link.js
+++ b/src/public/app/services/link.js
@@ -148,6 +148,11 @@ function parseNavigationStateFromUrl(url) {
 
     const hash = url.substr(hashIdx + 1); // strip also the initial '#'
     const [notePath, paramString] = hash.split("?");
+
+    if (!notePath.match(/^[_a-z0-9]{4,}(\/[_a-z0-9]{4,})*$/i)) {
+        return {};
+    }
+
     const viewScope = {
         viewMode: 'default'
     };