trim validated URLs

Author: tomysshadow

FlashpointSecurePlayer/Shared.cs

@@ -1987,6 +1987,8 @@ public string this[string shortPath] {
         private const string URI_SCHEME_FTP = "ftp";
 
         public static string GetValidatedURL(string url) {
+            url = url.Trim();
+
             // first try a guessed scheme
             // (for example, guess HTTP for www subdomain, FTP for ftp subdomain...)
             StringBuilder validatedURL = new StringBuilder((int)INTERNET_MAX_URL_LENGTH);
@@ -1999,7 +2001,7 @@ public static string GetValidatedURL(string url) {
                 url = validatedURL.ToString();
             } else {
                 // second try the default scheme
-                // we only do this to see if it returns S_FALSE
+                // we only do this to see if it returns S_FALSE, because
                 // if so, we know there is already a scheme and don't add our own
                 // we do not use the validated URL given by UrlApplyScheme here
                 validatedURL.Clear();
@@ -2011,8 +2013,10 @@ public static string GetValidatedURL(string url) {
                 // (in case the default is HTTPS)
                 if (err != S_FALSE) {
                     // skip leading slashes for protocol-less URLs
-                    if (url.StartsWith("//", StringComparison.Ordinal)) {
-                        url = url.Substring(2);
+                    const string LEADING_SLASHES = "//";
+
+                    if (url.StartsWith(LEADING_SLASHES, StringComparison.Ordinal)) {
+                        url = url.Substring(LEADING_SLASHES.Length);
                     }
 
                     url = URI_SCHEME_HTTP + "://" + url;