Merge pull request #2646 from phenax/patch-1

fix(extension-link): prevent parsing `javascript:` pseudo-protocol
ueberdosis · Apr 12, 2022 · 4108e9f · 4108e9f
2 parents 10855a4 + 947f311
commit 4108e9f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/extension-link/src/link.ts b/packages/extension-link/src/link.ts
@@ -78,7 +78,7 @@ export const Link = Mark.create<LinkOptions>({
 
   parseHTML() {
     return [
-      { tag: 'a[href]' },
+      { tag: 'a[href]:not([href *= "javascript:" i])' },
     ]
   },