提交的内容
This commit is contained in:
6
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrTransform/TargetBlank.php
vendored
Executable file → Normal file
6
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrTransform/TargetBlank.php
vendored
Executable file → Normal file
@ -33,7 +33,11 @@ class HTMLPurifier_AttrTransform_TargetBlank extends HTMLPurifier_AttrTransform
|
||||
|
||||
// XXX Kind of inefficient
|
||||
$url = $this->parser->parse($attr['href']);
|
||||
$scheme = $url->getSchemeObj($config, $context);
|
||||
|
||||
// Ignore invalid schemes (e.g. `javascript:`)
|
||||
if (!($scheme = $url->getSchemeObj($config, $context))) {
|
||||
return $attr;
|
||||
}
|
||||
|
||||
if ($scheme->browsable && !$url->isBenign($config, $context)) {
|
||||
$attr['target'] = '_blank';
|
||||
|
||||
Reference in New Issue
Block a user