From 0c806024fb3cb7ea8dec87fedbfa9aebd7c7ed8e Mon Sep 17 00:00:00 2001 From: zadam Date: Sun, 12 Mar 2023 21:20:34 +0100 Subject: [PATCH] added some extra allowed URI schemes, fixes #3692 --- src/services/html_sanitizer.js | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/services/html_sanitizer.js b/src/services/html_sanitizer.js index 32b275d17..899987b49 100644 --- a/src/services/html_sanitizer.js +++ b/src/services/html_sanitizer.js @@ -45,7 +45,12 @@ function sanitize(dirtyHtml) { 'table': [ 'class' ], 'en-media': [ 'hash' ] }, - allowedSchemes: ['http', 'https', 'ftp', 'mailto', 'data', 'evernote'], + allowedSchemes: [ + 'http', 'https', 'ftp', 'ftps', 'mailto', 'data', 'evernote', 'file', 'facetime', 'irc', 'gemini', 'git', + 'gopher', 'imap', 'irc', 'irc6', 'jabber', 'jar', 'lastfm', 'ldap', 'ldaps', 'magnet', 'message', + 'mumble', 'nfs', 'pop', 'rmi', 's3', 'sftp', 'skype', 'sms', 'spotify', 'steam', 'svn', 'udp', 'view-source', + 'vnc', 'ws', 'wss', 'xmpp', 'jdbc', 'slack' + ], transformTags, }); }