From 6a2ec4ae7e24814125e5a6c429713fa09d009287 Mon Sep 17 00:00:00 2001 From: ansuz Date: Fri, 25 Feb 2022 13:14:59 +0530 Subject: [PATCH] consider profile links unsafe --- www/profile/inner.js | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/www/profile/inner.js b/www/profile/inner.js index 8f7b8cf08..230bcc88e 100644 --- a/www/profile/inner.js +++ b/www/profile/inner.js @@ -135,6 +135,14 @@ define([ rel: 'noreferrer noopener' }).appendTo($block).hide(); + APP.$link.click(function (ev) { + ev.preventDefault(); + ev.stopPropagation(); + var href = $(this).attr('href').trim(); + if (!href) { return; } + common.openUnsafeURL(href); + }); + APP.$linkEdit = $(); if (APP.readOnly) { return; }