Skip to content

Block dangerous URL schemes in sanitizer #1206

Description

@RUKAYAT-CODER

Background

sanitizeUrl permits some dangerous schemes such as javascript: and data:. Reject them explicitly.

Files to modify (2-3)

src/utils/sanitize.ts
src/utils/socialUtils.ts

Acceptance Criteria

Implemented across the listed files

Unit/integration tests added or updated and passing

No regression; follows project coding standards

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions