From 1029a650c3107a9243097c96858994c52e03a5a9 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Sun, 10 Feb 2008 18:28:41 -0500 Subject: [PATCH] Do not allow the about: URI scheme Some browsers interpret about: URIs like a limited version of data: URIs. In particular, some versions of Internet Explorer interpret arbitrary HTML content in about: URIs. --- IkiWiki/Plugin/htmlscrubber.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/IkiWiki/Plugin/htmlscrubber.pm b/IkiWiki/Plugin/htmlscrubber.pm index f28f0816f..a8a37eafa 100644 --- a/IkiWiki/Plugin/htmlscrubber.pm +++ b/IkiWiki/Plugin/htmlscrubber.pm @@ -24,7 +24,7 @@ sub import { #{{{ "sip", "sips", "snmp", "tel", "urn", "wais", "xmpp", "z39.50r", "z39.50s", # Selected unofficial schemes - "about", "aim", "callto", "cvs", "ed2k", "feed", "fish", "gg", + "aim", "callto", "cvs", "ed2k", "feed", "fish", "gg", "irc", "ircs", "lastfm", "ldaps", "magnet", "mms", "msnim", "notes", "rsync", "secondlife", "skype", "ssh", "sftp", "sms", "steam", "webcal", "ymsgr", -- 2.39.5