Lain Soykaf 1be50ed28b fix(html): check link schemes the way browsers read them ... FastSanitize checks the scheme with URI.parse/1, which finds none in java<TAB>script:alert(1). Browsers remove tabs and newlines and leading control characters first and run it as a javascript: link. The scrubbers now use Pleroma.HTML.URIAttributes, which normalizes the URL the same way before the scheme check.		2026-10-22 16:36:16 +04:00
..
default.ex	fix(html): check link schemes the way browsers read them	2026-10-22 16:36:16 +04:00
links_only.ex	fix(html): check link schemes the way browsers read them	2026-10-22 16:36:16 +04:00
media_proxy.ex	Revert "Merge branch 'copyright-bump' into 'develop'"	2023-01-02 20:38:50 +00:00
search_indexing.ex	Specifically strip mentions for search indexing	2022-10-10 20:19:09 +03:00
twitter_text.ex	fix(html): check link schemes the way browsers read them	2026-10-22 16:36:16 +04:00