Texts: Allow <a href="foo"> links #2075

Closed
opened 2014-01-19 11:15:44 +00:00 by rlx · 1 comment
Owner

If a text url is always /texts/user:name/ (trailing slash), then this would make named references work.

If a text url is always `/texts/user:name/` (trailing slash), then this would make named references work.
rlx added the
frontend
label 2014-01-19 11:15:44 +00:00
rlx added this to the 13.04 milestone 2014-01-19 11:15:44 +00:00
rlx self-assigned this 2014-01-19 11:15:44 +00:00
rlx added the
normal
defect
labels 2014-01-19 11:15:44 +00:00
rlx changed title from Texts: Allow <a href="#foo"> links to Texts: Allow <a href="foo"> links 2014-01-20 07:03:20 +00:00
Author
Owner

URLs have to begin with "http://" or "/" (and maybe "#"), since "foo" can be one of the many ways to encode "javascript:alert('owned')".

URLs have to begin with "<http://"> or "/" (and maybe "#"), since "foo" can be one of the many ways to encode "javascript:alert('owned')".
rlx added the
wontfix
label 2014-02-08 16:24:13 +00:00
rlx closed this issue 2014-02-08 16:24:13 +00:00
Sign in to join this conversation.
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: 0x2620/pandora#2075
No description provided.