Merge pull request #2646 from phenax/patch-1

fix(extension-link): prevent parsing `javascript:` pseudo-protocol
2022-04-12 10:14:40 +02:00
parent 10855a4d92 947f311c0e
commit 4108e9f991
1 changed files with 1 additions and 1 deletions
--- a/packages/extension-link/src/link.ts
+++ b/packages/extension-link/src/link.ts
@@ -78,7 +78,7 @@ export const Link = Mark.create<LinkOptions>({

  parseHTML() {
    return [
-      { tag: 'a[href]' },
+      { tag: 'a[href]:not([href *= "javascript:" i])' },
    ]
  },