From 93debdb7e1c3848004129b2ba51fbc2924ad99c4 Mon Sep 17 00:00:00 2001
From: Dustin Ingram <di@users.noreply.github.com>
Date: Wed, 12 Feb 2020 14:43:02 -0600
Subject: [PATCH] Check for lines with third or lower level domains

---
 verify.py | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/verify.py b/verify.py
index 6d55ad1..2512184 100644
--- a/verify.py
+++ b/verify.py
@@ -29,7 +29,6 @@ def check_for_public_suffixes(filename):
     lines = files[filename]
     suffix_detected = False
     psl = None
-    download_suffixes()
     with open("public_suffix_list.dat", "r") as latest:
         psl = PublicSuffixList(latest)
     for i, line in enumerate(lines):
@@ -49,6 +48,22 @@ def check_for_public_suffixes(filename):
         sys.exit(1)
 
 
+def check_for_third_level_domains(filename):
+    with open("public_suffix_list.dat", "r") as latest:
+        psl = PublicSuffixList(latest)
+
+    invalid = {
+        line
+        for line in files[filename]
+        if len(psl.privateparts(line.strip())) > 1
+    }
+    if invalid:
+        print("The following domains contain a third or lower level domain in {!r}:".format(filename))
+        for line in sorted(invalid):
+            print("* {}".format(line))
+        sys.exit(1)
+
+
 def check_for_non_lowercase(filename):
     lines = files[filename]
     invalid = set(lines) - set(line.lower() for line in lines)
@@ -90,10 +105,15 @@ def check_for_intersection(filename_a, filename_b):
 
 
 if __name__ == "__main__":
+    # Download the list of public suffixes
+    download_suffixes()
 
     # Check if any domains have a public suffix
     check_for_public_suffixes(blocklist)
 
+    # Check if any domains are a third or lower level domain
+    check_for_third_level_domains(blocklist)
+
     # Check if any domains are not lowercase
     check_for_non_lowercase(allowlist)
     check_for_non_lowercase(blocklist)