diff options
| author | Douwe Maan <douwe@gitlab.com> | 2015-11-02 10:49:46 +0000 |
|---|---|---|
| committer | Douwe Maan <douwe@gitlab.com> | 2015-11-02 10:49:46 +0000 |
| commit | 329e067ff1d235af38f686145b03ced6c1fe7d85 (patch) | |
| tree | e14265a4a1237859d698b6ce484174bd45021062 /lib/api | |
| parent | cbd1c3e31e141b26d7c9d72cd36650ed00c2da1d (diff) | |
| parent | 16f8ca566b8637dc8092a6b630c23a82a905b437 (diff) | |
| download | gitlab-ce-329e067ff1d235af38f686145b03ced6c1fe7d85.tar.gz | |
Merge branch 'rs-dev-issue-2613' into 'master'
Add custom protocol whitelisting to SanitizationFilter
Addresses internal https://dev.gitlab.org/gitlab/gitlabhq/issues/2613
We allow any protocol for autolinks: irc://irc.freenode.net/git
But manual Markdown links with the same protocol get sanitized: `[This will not be clickable](irc://irc.freenode.net/git)`: [This will not be clickable](irc://irc.freenode.net/git)
To get around this we have to first allow *all* protocols, and then manually clean dangerous (i.e., `javascript:`) protocols.
See merge request !1496
Diffstat (limited to 'lib/api')
0 files changed, 0 insertions, 0 deletions