Skip to content

It doesn't support non-escaped URLs #9

@fregante

Description

@fregante

This is one of the URLs listed on MDN: https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs

data:text/html,<script>alert('hi');</script>

And it just fails due to < and the rest
Screen Shot 13

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions