fix(extension-link): restricts parsing javascript: pseudo-protocol
This commit is contained in:
@@ -78,7 +78,7 @@ export const Link = Mark.create<LinkOptions>({
|
|||||||
|
|
||||||
parseHTML() {
|
parseHTML() {
|
||||||
return [
|
return [
|
||||||
{ tag: 'a[href]' },
|
{ tag: 'a[href]:not([href *= "javascript:" i])' },
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user