Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Whitelist schemes for longdesc #221

Merged
merged 2 commits into from
Sep 22, 2015
Merged

Whitelist schemes for longdesc #221

merged 2 commits into from
Sep 22, 2015

Conversation

btoews
Copy link

@btoews btoews commented Sep 18, 2015

This limits the URL schemes that can be used for image tags' longdesc attribute.

/cc @jch @gregose @ptoomey3 @oreoshake

@ptoomey3
Copy link

Looks legit. 👍

'img' => {'src' => ['http', 'https', :relative]}
'img' => {
'src' => ['http', 'https', :relative],
'longdesc' => ['http', 'https', :relative]

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If longdesc is for images only, should the whitelisted attribute be moved to the img specific Hash key?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

jch added a commit that referenced this pull request Sep 22, 2015
Whitelist schemes for longdesc
@jch jch merged commit 555d8fa into gjtorikian:master Sep 22, 2015
@btoews btoews deleted the longdesc branch September 26, 2015 18:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants