diff options
| author | Eugen Rochko <eugen@zeonfederated.com> | 2020-02-08 21:22:38 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-02-08 21:22:38 +0100 |
| commit | b1349342d200937665ca6486c4b3ba1bae2f9d05 (patch) | |
| tree | e1c1c157f4e756b55fc86d3b9207b815ce2e4e34 /app/policies/relay_policy.rb | |
| parent | b686e275e7651532b2203083717d5ef88acb04b1 (diff) | |
Fix rendering `<a>` without `href` when scheme unsupported (#13040)
- Disallow links with relative paths - Disallow iframes with non-http protocols and relative paths Close #13037
Diffstat (limited to 'app/policies/relay_policy.rb')
0 files changed, 0 insertions, 0 deletions