Lain Soykaf 1be50ed28b fix(html): check link schemes the way browsers read them ... FastSanitize checks the scheme with URI.parse/1, which finds none in java<TAB>script:alert(1). Browsers remove tabs and newlines and leading control characters first and run it as a javascript: link. The scrubbers now use Pleroma.HTML.URIAttributes, which normalizes the URL the same way before the scheme check.		2026-10-22 16:36:16 +04:00
..
mix	fix(config): keep search startup settings static	2026-07-26 11:58:31 +04:00
pleroma	fix(html): check link schemes the way browsers read them	2026-10-22 16:36:16 +04:00