mozilla / bleach

Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes
https://bleach.readthedocs.io/en/latest/
Other
2.65k stars 253 forks source link

Support scheme-less urls if "https" is allowed (#662) #669

Closed willkg closed 2 years ago

willkg commented 2 years ago

Previously, we allowed scheme-less urls if "http" was allowed. This expands that to also support "https".

Fixes #662

willkg commented 2 years ago

Thank you!