Permalink
Browse files

Relative URIs are considered safe

  • Loading branch information...
Darren Coxall
Darren Coxall committed Dec 9, 2013
1 parent d0e587a commit 59358adea87fa5061b5c21be571a3480bf0217a9
Showing with 1 addition and 1 deletion.
  1. +1 −1 inline.go
View
@@ -718,7 +718,7 @@ func autoLink(p *parser, out *bytes.Buffer, data []byte, offset int) int {
return linkEnd - rewind
}
-var validUris = [][]byte{[]byte("http://"), []byte("https://"), []byte("ftp://"), []byte("mailto://")}
+var validUris = [][]byte{[]byte("http://"), []byte("https://"), []byte("ftp://"), []byte("mailto://"), []byte("/")}
func isSafeLink(link []byte) bool {
for _, prefix := range validUris {

0 comments on commit 59358ad

Please sign in to comment.