Mirrors
/
gitea
mirror of https://github.com/go-gitea/gitea.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
gitea/modules/markup
History
KN4CK3R 8af96f585f
Disallow dangerous url schemes (#25960) 
Regression: https://github.com/go-gitea/gitea/pull/24805
Closes: #25945

- Disallow `javascript`, `vbscript` and `data` (data uri images still
work) url schemes even if all other schemes are allowed
- Fixed older `cbthunderlink` tests

---------

Co-authored-by: delvh <dev.lh@web.de>
 		2023-07-18 15:18:37 +00:00
..
asciicast Support asciicast files as new markup (#22448) 2023-01-18 08:46:58 +08:00
common Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
console Add context when rendering labels or emojis (#23281) 2023-03-05 22:59:05 +01:00
csv Add context when rendering labels or emojis (#23281) 2023-03-05 22:59:05 +01:00
external Log STDERR of external renderer when it fails (#22442) 2023-01-13 20:41:23 +00:00
markdown Replace `interface{}` with `any` (#25686) 2023-07-04 18:36:08 +00:00
mdstripper Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
orgmode Upgrade go dependencies (#25819) 2023-07-14 11:00:31 +08:00
camo.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
camo_test.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
html.go Add RTL rendering support to Markdown (#24816) 2023-05-20 23:02:52 +02:00
html_internal_test.go Replace `interface{}` with `any` (#25686) 2023-07-04 18:36:08 +00:00
html_test.go Refactor path & config system (#25330) 2023-06-21 13:50:26 +08:00
renderer.go Add RTL rendering support to Markdown (#24816) 2023-05-20 23:02:52 +02:00
renderer_test.go Move `IsReadmeFile*` from `modules/markup/` to `modules/util` (#22877) 2023-02-13 15:01:09 -05:00
sanitizer.go Disallow dangerous url schemes (#25960) 2023-07-18 15:18:37 +00:00
sanitizer_test.go Disallow dangerous url schemes (#25960) 2023-07-18 15:18:37 +00:00