diff options
| author | Bitflash <admin@bitflash.network> | 2026-08-07 15:07:56 -0300 |
|---|---|---|
| committer | Bitflash <admin@bitflash.network> | 2026-08-07 15:07:56 -0300 |
| commit | 78cf0c3cb6752bd36bbc8fe7017d5d60cca13da7 (patch) | |
| tree | 7935ac82f4d46bb0f2652c6970d516bae9d57eb0 /src | |
| parent | a0355492c3bae37ad57ef3e05302a3e5b1a80e3e (diff) | |
tools: reject non-http(s) dashboard URLs in the pool directory
A pool's dashboard URL comes from its self-published status file. Escaping
it for HTML is not enough: a javascript: or data: scheme would still render
as a clickable script-injection on the public directory page. Only emit a
link for http(s) schemes; anything else shows as no link.
Diffstat (limited to 'src')
0 files changed, 0 insertions, 0 deletions