Adding google calendar iframe to houses page

I had been thinking this over and what the potential security risks could be at play. Right now we are just letting a user input an arbitrary URL and then rendering an . This seems like it could be used for other purposes. We should try to validate or restrict the url in some way to prevent this.</p> </div> </div> <div class="comment"> <div class="user"> <a rel="noreferrer nofollow" target="_blank" href="https://github.com/JKThanassi"><img src="https://avatars.githubusercontent.com/u/10533698?v=4" />JKThanassi</a> commented <strong> 6 years ago</strong> </div> <div class="markdown-body"> <p>Sounds like a good idea, that was an oversight on my part. Would checking to see if the beginning of the link contains <code>calendar.google.com</code> be enough?</p> </div> </div> <div class="comment"> <div class="user"> <a rel="noreferrer nofollow" target="_blank" href="https://github.com/JKThanassi"><img src="https://avatars.githubusercontent.com/u/10533698?v=4" />JKThanassi</a> commented <strong> 6 years ago</strong> </div> <div class="markdown-body"> <p>@tmwbook good to merge?</p> </div> </div> <div class="page-bar-simple"> </div> <div class="footer"> <ul class="body"> <li>© <script> document.write(new Date().getFullYear()) </script> Githubissues.</li> <li>Githubissues is a development platform for aggregating issues.</li> </ul> </div> <script src="https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.min.js"></script> <script src="/githubissues/assets/js.js"></script> <script src="/githubissues/assets/markdown.js"></script> <script src="https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@11.4.0/build/highlight.min.js"></script> <script src="https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@11.4.0/build/languages/go.min.js"></script> <script> hljs.highlightAll(); </script> </body> </html>

WPI-IFC / ifc-website

Adding google calendar iframe to houses page #20