]> BookStack Code Mirror - bookstack/blobdiff - app/Providers/AppServiceProvider.php
LDAP: Added TLS support
[bookstack] / app / Providers / AppServiceProvider.php
index 1cc3e09c22dc6677a517af03ddbbd0efeb3eac3b..f418153997286e5636e754279be147e753171ec7 100644 (file)
@@ -43,6 +43,13 @@ class AppServiceProvider extends ServiceProvider
             return substr_count($uploadName, '.') < 2;
         });
 
+        Validator::extend('safe_url', function ($attribute, $value, $parameters, $validator) {
+            $cleanLinkName = strtolower(trim($value));
+            $isJs = strpos($cleanLinkName, 'javascript:') === 0;
+            $isData = strpos($cleanLinkName, 'data:') === 0;
+            return !$isJs && !$isData;
+        });
+
         // Custom blade view directives
         Blade::directive('icon', function ($expression) {
             return "<?php echo icon($expression); ?>";