diff options
| author | KN4CK3R <admin@oldschoolhack.me> | 2023-07-18 17:18:37 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-18 15:18:37 +0000 |
| commit | 8af96f585f83ff5c0000f0395dab52b02517abe3 (patch) | |
| tree | 17bc1008b6c3c22460778ede11b5b5f8c466c390 /public/img/svg/octicon-versions.svg | |
| parent | cc73e84fa355fa49e875b2d17319b3da70775e0d (diff) | |
| download | gitea-8af96f585f83ff5c0000f0395dab52b02517abe3.tar.gz gitea-8af96f585f83ff5c0000f0395dab52b02517abe3.zip | |
Disallow dangerous url schemes (#25960)
Regression: https://github.com/go-gitea/gitea/pull/24805
Closes: #25945
- Disallow `javascript`, `vbscript` and `data` (data uri images still
work) url schemes even if all other schemes are allowed
- Fixed older `cbthunderlink` tests
---------
Co-authored-by: delvh <dev.lh@web.de>
Diffstat (limited to 'public/img/svg/octicon-versions.svg')
0 files changed, 0 insertions, 0 deletions