From 9083219ccc15c42cc878aabc894bbb9cc6b58812 Mon Sep 17 00:00:00 2001
From: Vordgi <sasha2822222@gmail.com>
Date: Mon, 2 Mar 2026 15:30:32 +0000
Subject: [PATCH] fix: improve validation and submitting on profile page

---
 app/pages/profile/[identity]/index.vue              | 12 ++++--------
 server/api/social/profile/[identifier]/index.put.ts |  7 ++++++-
 2 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/app/pages/profile/[identity]/index.vue b/app/pages/profile/[identity]/index.vue
index 614191fe06..45c9c0f577 100644
--- a/app/pages/profile/[identity]/index.vue
+++ b/app/pages/profile/[identity]/index.vue
@@ -112,7 +112,7 @@ defineOgImageComponent('Default', {
     <!-- Header -->
     <header class="mb-8 pb-8 border-b border-border">
       <!-- Editing Profile -->
-      <div v-if="isEditing" class="flex flex-col flex-wrap gap-4">
+      <form v-if="isEditing" class="flex flex-col flex-wrap gap-4" @submit.prevent="updateProfile">
         <label for="displayName" class="text-sm flex flex-col gap-2">
           {{ $t('profile.display_name') }}
           <input
@@ -145,18 +145,14 @@ defineOgImageComponent('Default', {
         </label>
         <div class="flex gap-4 items-center font-mono text-sm">
           <h2>@{{ profile?.handle }}</h2>
-          <ButtonBase @click="isEditing = false">
+          <ButtonBase @click="isEditing = false" type="button">
             {{ $t('common.cancel') }}
           </ButtonBase>
-          <ButtonBase
-            @click="updateProfile"
-            variant="primary"
-            :disabled="isUpdateProfileActionPending"
-          >
+          <ButtonBase variant="primary" :disabled="isUpdateProfileActionPending" type="submit">
             {{ $t('common.save') }}
           </ButtonBase>
         </div>
-      </div>
+      </form>
 
       <!-- Display Profile -->
       <div v-else class="flex flex-col flex-wrap gap-4">
diff --git a/server/api/social/profile/[identifier]/index.put.ts b/server/api/social/profile/[identifier]/index.put.ts
index a93e196ac3..f71e234d8b 100644
--- a/server/api/social/profile/[identifier]/index.put.ts
+++ b/server/api/social/profile/[identifier]/index.put.ts
@@ -13,7 +13,12 @@ export default eventHandlerWithOAuthSession(async (event, oAuthSession) => {
 
   await throwOnMissingOAuthScope(oAuthSession, PROFILE_SCOPE)
 
-  const body = parse(ProfileEditBodySchema, await readBody(event))
+  const requestBody = await readBody(event)
+  if (requestBody.website && !URL.canParse(requestBody.website)) {
+    throw createError({ statusCode: 400, statusMessage: 'Invalid website' })
+  }
+
+  const body = parse(ProfileEditBodySchema, requestBody)
   const client = new Client(oAuthSession)
 
   const profile = dev.npmx.actor.profile.$build({