Skip to content
Grav 2.0 is officially stable. Read the announcement →
General

XSS 'invalid_protocols' warning whenever content contains 'data:'

Started by Luca5 7 years ago · 0 replies · 1002 views
7 years ago

Hi,

Whenever I save a page that contains the word data followed by a colon, like data: I get an XSS warning "NOTICE: Grav found potential XSS issues in content: 'invalid_protocols'".

Is that a bug? Can I prevent that from happening somehow?

Suggested topics

Topic Participants Replies Views Activity
General · by Jerry Hunt, 4 days ago
2 128 20 hours ago
General · by pamtbaau, 1 day ago
1 89 1 day ago
General · by Andy Miller, 2 days ago
0 73 2 days ago
General · by Marcel, 12 months ago
6 382 5 days ago
General · by Duc , 6 days ago
3 69 6 days ago