Skip to content
Grav 2.1 is out: every page speaks Markdown. Read the announcement →

XSS 'invalid_protocols' warning whenever content contains 'data:'

Started by Luca5 8 years ago · 0 replies · 1148 views
8 years ago

Hi,

Whenever I save a page that contains the word data followed by a colon, like data: I get an XSS warning "NOTICE: Grav found potential XSS issues in content: 'invalid_protocols'".

Is that a bug? Can I prevent that from happening somehow?

Suggested topics

Topic Participants Replies Views Activity
General · by jeremycherfas, 1 week ago
5 198 7 hours ago
General · by lynbor, 6 days ago
2 131 3 days ago
General · by Old Man Umby, 1 week ago
1 105 1 week ago
General · by Sebastian, 2 weeks ago
1 130 2 weeks ago
General · by Andy Miller, 3 weeks ago
0 252 3 weeks ago