Fix #96638

src/vs/workbench/contrib/url/common/trustedDomainsValidator.ts

@@ -222,6 +222,10 @@ function pathMatches(open: string, rule: string) {
 		return true;
 	}
 
+	if (rule[rule.length - 1] === '/') {
+		rule = rule.slice(0, -1);
+	}
+
 	const openSegments = open.split('/');
 	const ruleSegments = rule.split('/');
 	for (let i = 0; i < ruleSegments.length; i++) {

src/vs/workbench/contrib/url/test/browser/trustedDomains.test.ts

@@ -56,6 +56,11 @@ suite('Link protection domain matching', () => {
 
 	test('sub paths', () => {
 		linkAllowedByRules('https://x.org/foo', ['https://x.org/foo']);
+		linkAllowedByRules('https://x.org/foo/bar', ['https://x.org/foo']);
+
+		linkAllowedByRules('https://x.org/foo', ['https://x.org/foo/']);
+		linkAllowedByRules('https://x.org/foo/bar', ['https://x.org/foo/']);
+
 		linkAllowedByRules('https://x.org/foo', ['x.org/foo']);
 		linkAllowedByRules('https://x.org/foo', ['*.org/foo']);