Wrong ut_tld and ut_domain if a valid TLD is in the middle of the string but not at the end

[teresachila]

Example: 1.something.com.local
This is not a valid domain, however, since "com" is in the middle of the string, it returns "com" as ut_tld and "l.com" as ut_domain. It should return None instead.

Suggested fix:
In ut_parse_lib.py, under the findTLD() function, add the following check right before returning TLD:

    if (len(items)>0 and items[-1]!=parts[-1]):
         # the TLD is not found at the end of the string, not a valid TLD
         TLD=None

[ggokdemir]

Hi @teresachila ,

Thank you for bringing this up!

I’d like to inform you that I tried applying your fix, but unfortunately, it didn’t work.

It should have theoretically resolved the issue; however, it still doesn’t seem to be functioning correctly. I suspect it’s still referencing the Public Suffix List (PSL) rules and expects the input to align accordingly. It continues to check the PSL and returns 'com' as the TLD, as specified.

I’ll label this as a duplicate, as it appears to be the same as issue #7 , but I’ll keep it open for now.
Please let me know if you have any thoughts or suggestions. I’d greatly appreciate any help or feedback!

[ggokdemir]

I updated the repository at https://github.com/splunk/utbox/tree/utbox-PSL-update with the latest Public Suffix List from https://publicsuffix.org/list/.