Skip to content

Commit

Permalink
Replace TrustedURL with calling a default policy on navigation to jav…
Browse files Browse the repository at this point in the history 
…ascript: URLs. (#204)

This removes the burden from all authors to create types when interacting with common sinks that usually don't cause DOM XSS (unless for javascript: URLs).

This PR prevents javascript: URLs from working by default, and allows programmatic opt-in to enable them one-by-one for the few applications that need them.

Related to #176.
Partially addresses #169.
Fixes #64.
  • Loading branch information
@koto
koto authored Sep 4, 2019
1 parent c7c57ac commit d14d694
Show file tree
Hide file tree
Showing 2 changed files with 416 additions and 672 deletions.
Loading

0 comments on commit d14d694

Please sign in to comment.