fix(extension-link): extract the scheme from the URL before checking …

…whether it's javascript
ueberdosis · May 16, 2024 · 0ac4249 · 0ac4249
1 parent b79de07
commit 0ac4249
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/packages/extension-link/src/link.ts b/packages/extension-link/src/link.ts
@@ -161,9 +161,7 @@ export const Link = Mark.create<LinkOptions>({
   },
 
   renderHTML({ HTMLAttributes }) {
-    // False positive; we're explicitly checking for javascript: links to ignore them
-    // eslint-disable-next-line no-script-url
-    if (HTMLAttributes.href?.toLowerCase().trim().startsWith('javascript:')) {
+    if (HTMLAttributes.href?.substring(0, HTMLAttributes.href.indexOf(':')).toLowerCase().trim() === 'javascript') {
       // strip out the href
       return ['a', mergeAttributes(this.options.HTMLAttributes, { ...HTMLAttributes, href: '' }), 0]
     }