]> Untitled Git - lemmy.git/commit
projects / lemmy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c12feda) | patch
Only allow http(s) scheme for urls (ref #3505) (#3508)
authorNutomic <me@nutomic.com>
Thu, 6 Jul 2023 12:29:51 +0000 (14:29 +0200)
committerGitHub <noreply@github.com>
Thu, 6 Jul 2023 12:29:51 +0000 (08:29 -0400)
commit00f9f79a44887869dcdc3fe5bd1dabbbdc080cec
tree88a6a106ada6b5449e1b8ea18962f318bea7768etree | snapshot
parentc12fedaf1b39ef0d5d7122221a0e57ba50f04ac6commit | diff
Only allow http(s) scheme for urls (ref #3505) (#3508)

With this change only http(s) schemes are allowed for post.url
field. This is checked for incoming api and federation requests.
Existing posts in database which are sent to clients are not
checked. Neither does it check urls in markdown.
crates/api_crud/src/post/create.rs diff | blob | history
crates/api_crud/src/post/update.rs diff | blob | history
crates/apub/src/objects/post.rs diff | blob | history
crates/utils/src/utils/validation.rs diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.