KN4CK3R 8af96f585f
Disallow dangerous url schemes (#25960)
Regression: https://github.com/go-gitea/gitea/pull/24805
Closes: #25945

- Disallow `javascript`, `vbscript` and `data` (data uri images still
work) url schemes even if all other schemes are allowed
- Fixed older `cbthunderlink` tests

---------

Co-authored-by: delvh <dev.lh@web.de>
2023-07-18 15:18:37 +00:00
..
2023-07-14 11:00:31 +08:00
2023-04-17 11:37:23 +08:00
2023-07-14 11:00:31 +08:00
2023-07-07 05:31:56 +00:00
2023-07-12 19:07:29 +02:00
2023-07-07 05:31:56 +00:00
2023-07-07 05:31:56 +00:00
2023-05-21 22:35:11 +00:00
2023-06-28 08:02:06 +02:00
2023-07-07 05:31:56 +00:00
2023-02-11 08:39:50 +08:00
2022-12-30 23:31:00 +08:00
2023-07-04 18:36:08 +00:00
2023-07-07 05:31:56 +00:00
2023-07-15 11:52:03 +03:00