General

XSS 'invalid_protocols' warning whenever content contains 'data:'

Started by Luca5 8 years ago · 0 replies · 1113 views

8 years ago

Hi,

Whenever I save a page that contains the word data followed by a colon, like data: I get an XSS warning "NOTICE: Grav found potential XSS issues in content: 'invalid_protocols'".

Is that a bug? Can I prevent that from happening somehow?

Suggested topics

Topic	Replies	Views	Activity
Popularity files General · by jean-louis67, 3 weeks ago	2	311	3 weeks ago
This forum plugin "Forum Pro" is now available... General · by Andy Miller, 3 weeks ago	0	312	3 weeks ago
No more access to Admin pannel after Update 1.7.5.. General · by Veehem, 4 weeks ago	0	264	4 weeks ago
Introducing my tailored Docker LAMP stack for Grav General · by milkboy, 4 weeks ago	0	267	4 weeks ago
Have URI param() and query() methods been disabled? For security reasons? General · by ian russell, 1 month ago	2	336	1 month ago