Closed chrisvanrun closed 2 weeks ago
Closes: #3385
The href attribute was never parsed as a URL and incorrectly assumed to always be a hash-only string.
href
Cleaner solution to have an allow list in the first place!
Closes: #3385
The
href
attribute was never parsed as a URL and incorrectly assumed to always be a hash-only string.