pleroma/priv
Lain Soykaf 1be50ed28b
fix(html): check link schemes the way browsers read them
FastSanitize checks the scheme with URI.parse/1, which finds none in
java<TAB>script:alert(1). Browsers remove tabs and newlines and leading
control characters first and run it as a javascript: link. The scrubbers
now use Pleroma.HTML.URIAttributes, which normalizes the URL the same
way before the scheme check.
2026-10-22 16:36:16 +04:00
..
gettext Translated using Weblate (French) 2026-05-13 20:08:05 +00:00
repo fix(migrations): make Rebased rollback safe 2026-07-29 15:22:13 +04:00
scrubbers fix(html): check link schemes the way browsers read them 2026-10-22 16:36:16 +04:00
static litepub-0.1.jsonld cleanup 2026-04-10 21:33:20 +02:00
templates Bump minimum Elixir version to 1.10 2022-09-02 22:53:54 +02:00