Do not allow the steam: URI scheme.

diff --git a/IkiWiki/Plugin/htmlscrubber.pm b/IkiWiki/Plugin/htmlscrubber.pm
index 53d4635d554736c449a2220d43336a7ef5ebf07a..8804daf56985fd458ddfb4f598c5c6364cf69443 100644 (file)
--- a/IkiWiki/Plugin/htmlscrubber.pm
+++ b/IkiWiki/Plugin/htmlscrubber.pm
@@ -27,7 +27,7 @@ sub import { #{{{
                "aim", "callto", "cvs", "ed2k", "feed", "fish", "gg",
                "irc", "ircs", "lastfm", "ldaps", "magnet", "mms",
                "msnim", "notes", "rsync", "secondlife", "skype", "ssh",
-               "sftp", "sms", "steam", "webcal", "ymsgr",
+               "sftp", "sms", "webcal", "ymsgr",
        );
        # data is a special case. Allow data:image/*, but
        # disallow data:text/javascript and everything else.

diff --git a/debian/changelog b/debian/changelog
index 0745a2f0f114e2488da9679dc09928eaf8c03599..28b5feee7b2c27307b04c0d772e53d16bbf9f58f 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -15,6 +15,7 @@ ikiwiki (2.32.3) UNRELEASED; urgency=low
   [ Josh Triplett ]
   * Match literal '.' in URI schemas containing '.', rather than matching any
     character.
+  * Do not allow the steam: URI scheme.
 
  -- Josh Triplett <josh@freedesktop.org>  Sun, 10 Feb 2008 14:48:48 -0800