You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently we're allowing only http and https schemes (protocols) in links rendered markdown. There are users that want others, like ftp (e.g. #8478)
Currently, this renders nothing:
[My link](ftp://www.mysite.com)
There are a number of other schemes we could support, and some of them could be very useful, like the aforementioned ftp, VS Code extensions, cvs, ed2k, torrent, git, ssh, magnet, maps, sftp, skype, svn, etc.
I'm not sure which ones could pose a security problem, so I propose adding an app.ini settings with the list of desired schemes. The obvious default is http, https, but perhaps we want to add ftp and others, so let's hear out your ideas.
The text was updated successfully, but these errors were encountered:
Seems like a good addition. mailto: is another common scheme. Does anyone have insight on what possible security concerns could be, besides obvious stuff like javascript:?
Currently we're allowing only http and https schemes (protocols) in links rendered markdown. There are users that want others, like ftp (e.g. #8478)
Currently, this renders nothing:
There are a number of other schemes we could support, and some of them could be very useful, like the aforementioned ftp, VS Code extensions, cvs, ed2k, torrent, git, ssh, magnet, maps, sftp, skype, svn, etc.
I'm not sure which ones could pose a security problem, so I propose adding an
app.ini
settings with the list of desired schemes. The obvious default ishttp, https
, but perhaps we want to addftp
and others, so let's hear out your ideas.The text was updated successfully, but these errors were encountered: