gitea/modules/markup
KN4CK3R 8af96f585f
Disallow dangerous url schemes ()
Regression: https://github.com/go-gitea/gitea/pull/24805
Closes: 

- Disallow `javascript`, `vbscript` and `data` (data uri images still
work) url schemes even if all other schemes are allowed
- Fixed older `cbthunderlink` tests

---------

Co-authored-by: delvh <dev.lh@web.de>
..
asciicast Support asciicast files as new markup ()
common Implement FSFE REUSE for golang files ()
console Add context when rendering labels or emojis ()
csv Add context when rendering labels or emojis ()
external Log STDERR of external renderer when it fails ()
markdown Replace `interface{}` with `any` ()
mdstripper Implement FSFE REUSE for golang files ()
orgmode Upgrade go dependencies ()
camo.go Implement FSFE REUSE for golang files ()
camo_test.go Implement FSFE REUSE for golang files ()
html.go Add RTL rendering support to Markdown ()
html_internal_test.go Replace `interface{}` with `any` ()
html_test.go Refactor path & config system ()
renderer.go Add RTL rendering support to Markdown ()
renderer_test.go Move `IsReadmeFile*` from `modules/markup/` to `modules/util` ()
sanitizer.go Disallow dangerous url schemes ()
sanitizer_test.go Disallow dangerous url schemes ()