You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
gitea/modules/markup
KN4CK3R ab54310731
Disallow dangerous URL schemes (#25960) (#25964)
Regression: https://github.com/go-gitea/gitea/pull/24805
Closes: #25945

- Disallow `javascript`, `vbscript` and `data` (data uri images still
work) url schemes even if all other schemes are allowed
- Fixed older `cbthunderlink` tests

---------

Co-authored-by: delvh <dev.lh@web.de>
2 years ago
..
asciicast Support asciicast files as new markup (#22448) 2 years ago
common Implement FSFE REUSE for golang files (#21840) 2 years ago
console Add context when rendering labels or emojis (#23281) 2 years ago
csv Add context when rendering labels or emojis (#23281) 2 years ago
external Log STDERR of external renderer when it fails (#22442) 2 years ago
markdown Replace `interface{}` with `any` (#25686) (#25687) 2 years ago
mdstripper Implement FSFE REUSE for golang files (#21840) 2 years ago
orgmode Add context when rendering labels or emojis (#23281) 2 years ago
camo.go Implement FSFE REUSE for golang files (#21840) 2 years ago
camo_test.go Implement FSFE REUSE for golang files (#21840) 2 years ago
html.go Add RTL rendering support to Markdown (#24816) 2 years ago
html_internal_test.go Replace `interface{}` with `any` (#25686) (#25687) 2 years ago
html_test.go Refactor path & config system (#25330) (#25416) 2 years ago
renderer.go Add RTL rendering support to Markdown (#24816) 2 years ago
renderer_test.go Move `IsReadmeFile*` from `modules/markup/` to `modules/util` (#22877) 2 years ago
sanitizer.go Disallow dangerous URL schemes (#25960) (#25964) 2 years ago
sanitizer_test.go Disallow dangerous URL schemes (#25960) (#25964) 2 years ago