fix: Block unsafe markdown URL schemes (v1.55.46) - Allow only http, https, mailto, root-relative, and relative markdown URLs - Render unsafe links and images as escaped plain text instead of active tags - Add regression coverage for javascript/data markdown payloads
$ koh steal kepr.uk/kepr@8f8d0f4071bb
·
parent: 32482c4290ad
discussion
log in to leave a comment.