diff options
| author | ArthurHoaro <arthur@hoa.ro> | 2017-05-25 14:52:42 +0200 |
|---|---|---|
| committer | ArthurHoaro <arthur@hoa.ro> | 2017-05-25 14:58:34 +0200 |
| commit | 86ceea054f5f85157b04473bac5bfb6ff86ca31f (patch) | |
| tree | e8216f2f36952818427e633b641a54a6ff26379a /tests/plugins/resources/markdown.html | |
| parent | 61c15aa5554431893ea5ebe800a9a625dca5aff9 (diff) | |
| download | Shaarli-86ceea054f5f85157b04473bac5bfb6ff86ca31f.tar.gz Shaarli-86ceea054f5f85157b04473bac5bfb6ff86ca31f.tar.zst Shaarli-86ceea054f5f85157b04473bac5bfb6ff86ca31f.zip | |
Add a whitelist of protocols for URLs
- for Shaare
- for markdown description links and images
Not whitelisted protocols will be replaced by `http://`
Diffstat (limited to 'tests/plugins/resources/markdown.html')
| -rw-r--r-- | tests/plugins/resources/markdown.html | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/tests/plugins/resources/markdown.html b/tests/plugins/resources/markdown.html index 07a5a32e..844a6f31 100644 --- a/tests/plugins/resources/markdown.html +++ b/tests/plugins/resources/markdown.html | |||
| @@ -21,4 +21,13 @@ | |||
| 21 | next #foo</code></pre> | 21 | next #foo</code></pre> |
| 22 | <p>Block:</p> | 22 | <p>Block:</p> |
| 23 | <pre><code>lorem ipsum #foobar http://link.tld | 23 | <pre><code>lorem ipsum #foobar http://link.tld |
| 24 | #foobar http://link.tld</code></pre></div> \ No newline at end of file | 24 | #foobar http://link.tld</code></pre> |
| 25 | <p><a href="?123456">link</a><br /> | ||
| 26 | <img src="/img/train.png" alt="link" /><br /> | ||
| 27 | <a href="http://test.tld/path/?query=value#hash">link</a><br /> | ||
| 28 | <a href="http://test.tld/path/?query=value#hash">link</a><br /> | ||
| 29 | <a href="https://test.tld/path/?query=value#hash">link</a><br /> | ||
| 30 | <a href="ftp://test.tld/path/?query=value#hash">link</a><br /> | ||
| 31 | <a href="magnet:test.tld/path/?query=value#hash">link</a><br /> | ||
| 32 | <a href="http://alert('xss')">link</a><br /> | ||
| 33 | <a href="http://test.tld/path/?query=value#hash">link</a></p></div> \ No newline at end of file | ||