bleedingdeacons / register

49%

LAST BUILD ON BRANCH main

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• build/prune-stale-sln-projects
• build/upgrade-to-net10
• cache-lists
• chore/align-assembly-version
• chore/analyser-cleanup-cosmetic
• chore/analyser-cleanup-dead-code
• chore/claude-project-settings
• chore/diagnostic-dump-layout
• chore/drop-nested-global-json
• chore/remove-orphaned-unity-data
• ci/auto-version-on-pr
• ci/bump-on-merge
• ci/consume-integrity-client-package
• ci/github-actions-analyzers
• ci/harden-package-restore
• ci/windows-head-job
• feat/build-timestamp
• feat/freedom-config
• feat/gdpr-scroll-hint
• feat/inventory-logging
• feat/reject-service-domain-personal-email
• fix/betterstack-endpoint-scheme
• fix/build-warnings-apple-heads
• fix/compiled-xaml-bindings
• fix/email-auth-failure-trips-breaker
• fix/inventory-https
• fix/markdown-link-schemes
• fix/meeting-repository-factory
• fix/nu1105-package-version
• fix/nullability-warnings
• fix/selection-page-load-race
• main
• refactor/register-core
• refactor/registration-gate
• test/executable-specification
• test/register-core-edges
• tests/raise-coverage
• tests/register-tier1
• tests/register-unit-tests-tier3

Build # 37157728583

Build Type

push

github

Committed by web-flow

Commit Message

fix: only link markdown to http, https and mailto targets (#52)

BasicMarkdownConverter escaped HTML before building links, so a quote
could not break out of the href, but it put any target into one:
[x](javascript:alert(1)) became a live javascript: link. A target is now
linked only when it is an absolute http, https or mailto URI whose raw
text begins with that scheme; anything else (javascript:, data:,
vbscript:, a relative path) is rendered as the link text alone.

Coverage Stats

7 of 7 new or added lines in 1 file covered. (100.0%)

2119 of 4284 relevant lines covered (49.46%)

4.26 hits per line