feat: href validation

src/globals/Footer.ts

@@ -1,6 +1,7 @@
 import { GlobalConfig } from 'payload'
 import { isAdmin } from '@/collections/access/admin'
 import { revalidateTag } from 'next/cache'
+import { validateHref } from '@/globals/ValidateHref'
 
 export const FooterGlobal: GlobalConfig = {
   slug: 'footer',
@@ -50,6 +51,7 @@ export const FooterGlobal: GlobalConfig = {
               label: {
                 de: 'Zieladresse',
               },
+              validate: validateHref,
             },
           ],
         },

src/globals/Menu.ts

@@ -1,6 +1,7 @@
 import { Block, GlobalConfig } from 'payload'
-import { hide, isAdmin } from '@/collections/access/admin'
+import { isAdmin } from '@/collections/access/admin'
 import { revalidateTag } from 'next/cache'
+import { validateHref } from '@/globals/ValidateHref'
 
 const SimpleItem: Block = {
   slug: 'simple-item',
@@ -18,7 +19,8 @@ const SimpleItem: Block = {
       name: 'href',
       type: 'text',
       label: 'Zieladresse',
-      required: true
+      required: true,
+      validate: validateHref,
     },
     {
       name: 'type',
@@ -93,6 +95,7 @@ const MegaMenuItem: Block = {
               label: 'Zieladresse',
               type: 'text',
               required: true,
+              validate: validateHref,
             }
           ],
           required: true,

src/globals/ValidateHref.ts

@@ -0,0 +1,16 @@
+/**
+ * Payload field validator for href/link fields.
+ * Ensures values start with `/`, `http://`, or `https://`
+ * to prevent malformed or relative URLs.
+ */
+export const validateHref = (value: string | null | undefined) => {
+  if (
+    value &&
+    !value.startsWith('/') &&
+    !value.startsWith('http://') &&
+    !value.startsWith('https://')
+  ) {
+    return 'Zieladresse muss mit "/", "http://" oder "https://" beginnen'
+  }
+  return true
+}