fix(sanitize): switch sanitizeUrlProtocols to allowlist for ://-scheme URLs#31715

Merged

pelikhan merged 7 commits into

mainfrom

copilot/fix-sanitize-url-protocols

May 12, 2026

Commits on May 12, 2026

Initial plan
Copilot
authored
chore: planning sanitizeUrlProtocols fix

Copilot
and
szabta89
authored
fix(sanitize): switch protocol:// filter to allowlist; add magnet: to single-colon blocklist

Copilot
and
szabta89
authored
refactor(sanitize): split sanitizeUrlProtocols into two focused replace calls

Copilot
and
szabta89
authored
Merge remote-tracking branch 'origin/main' into copilot/fix-sanitize-url-protocols
Copilot
authored
fix(sanitize): guard empty-domain case in allowlist-based scheme:// redaction

Copilot
and
pelikhan
authored
fix(sanitize): correct comment for empty-domain branch in sanitizeUrlProtocols

Copilot
and
pelikhan
authored