Infra-Mirrors/PrivateBin
1
0
Fork 0
mirror of https://github.com/PrivateBin/PrivateBin.git synced 2025-07-25 15:55:29 -04:00
Code Issues Projects Releases Packages Wiki Activity

Sanitize output from Helper.urls2links

Browse source
This commit is contained in:
Haocen Xu 2020-05-30 06:05:20 -04:00
parent 25a39148a8
commit 5f0011b0f6
No known key found for this signature in database
GPG key ID: 3F0D955A0F6AD729
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
js/privatebin.js
View file

@ -405,10 +405,12 @@ jQuery.PrivateBin = (function($, RawDeflate) {
me.urls2links = function(element) me.urls2links = function(element)
{ {
element.html( element.html(
DOMPurify.sanitize(
element.html().replace( element.html().replace(
/(((https?|ftp):\/\/[\w?!=&.\/-;#@~%+*-]+(?![\w\s?!&.\/;#~%"=-]>))|((magnet):[\w?=&.\/-;#@~%+*-]+))/ig, /(((https?|ftp):\/\/[\w?!=&.\/-;#@~%+*-]+(?![\w\s?!&.\/;#~%"=-]>))|((magnet):[\w?=&.\/-;#@~%+*-]+))/ig,
'<a href="$1" rel="nofollow">$1</a>' '<a href="$1" rel="nofollow">$1</a>'
) )
)
); );
}; };