mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-10-26 16:46:12 +01:00
fix: potential for XSS here
This commit is contained in:
@@ -691,6 +691,7 @@
|
||||
},
|
||||
|
||||
urlToLocation: function (url) {
|
||||
url = encodeURI(url);
|
||||
return $('<a href="' + url + '" />')[0];
|
||||
},
|
||||
|
||||
|
||||
Reference in New Issue
Block a user