validate TLD

main.go

@@ -107,13 +107,22 @@ func search(w http.ResponseWriter, r *http.Request) {
 }
 
 func ParseURI(uri string) (*url.URL, error) {
-	if !strings.ContainsRune(uri, '.') {
-		return nil, errors.New("no top level domain")
-	}
-
 	if !strings.HasPrefix(uri, "http://") && !strings.HasPrefix(uri, "https://") {
 		uri = "https://" + uri
 	}
 	ret, err := url.ParseRequestURI(uri)
-	return ret, err
+	if err != nil {
+		return nil, err
+	}
+
+	splits := strings.Split(ret.Hostname(), ".")
+	if len(splits) <= 1 {
+		return nil, errors.New("hostname doesn't have a TLD")
+	}
+
+	if _, ok := TLDs[splits[len(splits)-1]]; !ok {
+		return nil, errors.New("invalid top level domain")
+	}
+
+	return ret, nil
 }