diff options
author | Eugen Rochko <eugen@zeonfederated.com> | 2020-02-08 21:22:38 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-02-08 21:22:38 +0100 |
commit | b1349342d200937665ca6486c4b3ba1bae2f9d05 (patch) | |
tree | e1c1c157f4e756b55fc86d3b9207b815ce2e4e34 /app/lib/search_query_parser.rb | |
parent | b686e275e7651532b2203083717d5ef88acb04b1 (diff) |
Fix rendering `<a>` without `href` when scheme unsupported (#13040)
- Disallow links with relative paths - Disallow iframes with non-http protocols and relative paths Close #13037
Diffstat (limited to 'app/lib/search_query_parser.rb')
0 files changed, 0 insertions, 0 deletions