reject handles from disallowed domains

mackuba · Mar 9, 2024 · 66110d1 · 66110d1
1 parent 25fd0bb
commit 66110d1
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/didkit/resolver.rb b/lib/didkit/resolver.rb
@@ -8,9 +8,13 @@
 
 module DIDKit
   class Resolver
+    RESERVED_DOMAINS = %w(alt arpa example internal invalid local localhost onion test)
+
     def resolve_handle(handle)
       domain = handle.gsub(/^@/, '')
 
+      return nil if RESERVED_DOMAINS.include?(domain.split('.').last)
+
       if dns_did = resolve_handle_by_dns(domain)
         DID.new(dns_did, :dns)
       elsif http_did = resolve_handle_by_well_known(domain)