Merge pull request #1301 from zeroware/develop

Include magnet scheme in sanitize HTML params
This commit is contained in:
Matthew Hodgson 2017-10-14 23:48:43 +01:00 committed by GitHub
commit 67ba0e59a2

View File

@ -172,7 +172,7 @@ const sanitizeHtmlParams = {
// Lots of these won't come up by default because we don't allow them
selfClosing: ['img', 'br', 'hr', 'area', 'base', 'basefont', 'input', 'link', 'meta'],
// URL schemes we permit
allowedSchemes: ['http', 'https', 'ftp', 'mailto'],
allowedSchemes: ['http', 'https', 'ftp', 'mailto', 'magnet'],
allowProtocolRelative: false,