summaryrefslogtreecommitdiff
path: root/po/underlays/directives/ikiwiki/directive/poll.da.po
diff options
context:
space:
mode:
authorJoey Hess <joey@gnu.kitenet.net>2010-04-02 16:05:14 -0400
committerJoey Hess <joey@gnu.kitenet.net>2010-04-02 16:05:14 -0400
commit104919ee07b70b166c6c6be13b4f6e5bc5225179 (patch)
treedce9764b1d1bf6f608294dd75502198413efcafb /po/underlays/directives/ikiwiki/directive/poll.da.po
parent05b6e8ceee2bec4442727e2475abf8a8861d5e0a (diff)
htmlscrubber: Allow colons in url fragments after '?'
Colons are not allowed at the start of urls, because it can be interpreted as a protocol, and allowing arbitrary protocols can be unsafe (CVE-2008-0809). However, this check was too restrictive, not allowing use of eg, "video.ogv?t=0:03:00/0:04:00" to seek to a given place in a video, or "somecgi?foo=bar:baz" to pass parameters with colons. It's still not allowed to have a filename with a colon in it (ie "foo:bar.png") -- to link to such a file, a fully qualified url must be used.
Diffstat (limited to 'po/underlays/directives/ikiwiki/directive/poll.da.po')
0 files changed, 0 insertions, 0 deletions