github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 01:38:56 -04:00
Code Issues Projects Releases Packages Wiki Activity

Improve script URL detection logic (#150045)

Browse source
This commit is contained in:
Thomas Watson 2023-02-01 19:24:28 +01:00 • committed by GitHub
parent fea634d9a4
commit 3fbbbd4c24
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/plugins/vis_types/timeseries/public/application/components/vis_types/table/vis.js
View file

@ -46,8 +46,9 @@ function getColor(rules, colorKey, value) {
}
function sanitizeUrl(url) {
const { protocol } = parseUrl(url);
// eslint-disable-next-line no-script-url
if (parseUrl(url).protocol === 'javascript:') {
if (protocol === 'javascript:' || protocol === 'data:' || protocol === 'vbscript:') {
return '';
}
return url;