Fork me on GitHub
Subscribe 2

Ticket #755 (fixed bug)

Allow HTTP and FTP links only

  • Created: 2012-10-19 19:33:23
  • Reported by: adaur
  • Assigned to: quy
  • Milestone: 1.5.1
  • Component: parser
  • Priority: low
[url=javascript:alert(123)]bbcode xss test[/url]

produces

bbcode xss test

which is not a valid link.

See https://fluxbb.org/forums/viewtopic.php?id=6446

History

quy 2012-10-21 17:43:50

Commit 1309537 to fluxbb master

#755: Verify URL is a valid URL format before hyperlinking in parser. Reported by adaur.

quy 2012-10-21 17:45:17

  • Owner set to quy.
  • Status changed from open to fixed.