mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-07-23 05:33:48 +03:00
Updated allow list/purifier system to only allow file protocol use on anchor hrefs to avoid potential security concerns with, after export, content being auto loaded via interactive elements like embeds/objects/videos etc... Updated tests to cover. Thanks to Gurmandeep Deol at Seneca Polytechnic for reporting.