htmlscrubber: Do not scrub url anchors that contain colons.

master
Joey Hess 2010-08-19 13:59:31 -04:00
parent 6e7ae22ed2
commit 9b9ecda62f
3 changed files with 7 additions and 1 deletions

View File

@ -32,7 +32,7 @@ sub import {
);
# data is a special case. Allow a few data:image/ types,
# but disallow data:text/javascript and everything else.
$safe_url_regexp=qr/^(?:(?:$uri_schemes):|data:image\/(?:png|jpeg|gif)|[^:]+(?:$|[\/\?]))/i;
$safe_url_regexp=qr/^(?:(?:$uri_schemes):|data:image\/(?:png|jpeg|gif)|[^:]+(?:$|[\/\?#]))|^#/i;
}
sub getsetup () {

1
debian/changelog vendored
View File

@ -9,6 +9,7 @@ ikiwiki (3.20100816) UNRELEASED; urgency=low
(and MSIE 8 in compat mode). Thanks to Iain McLaren for reporting
the bug and providing access to debug it.
* style.css: Use relative, not absolute font sizes. Thanks, Giuseppe Bilotta.
* htmlscrubber: Do not scrub url anchors that contain colons.
-- Joey Hess <joeyh@debian.org> Sun, 15 Aug 2010 11:45:48 -0400

View File

@ -11,3 +11,8 @@ enabled, the links are created but their hrefs are empty (so they do not actuall
Disabling the htmlscrubber plugin fixes this issue
[[!tag multimarkdown htmlscrubber]]
> href was of the form: #fnref:1 , scrubbed by overzealous protocol
> scrubbing.
[[done]] --[[Joey]]