Skip to content
● Grav 2.2 is out: 2x faster cold starts and 96% less memory on big sites. Read the announcement →

XSS 'invalid_protocols' warning whenever content contains 'data:'

Started by Luca5 8 years ago · 0 replies · 1181 views
8 years ago

Hi,

Whenever I save a page that contains the word data followed by a colon, like data: I get an XSS warning "NOTICE: Grav found potential XSS issues in content: 'invalid_protocols'".

Is that a bug? Can I prevent that from happening somehow?

Suggested topics

Topic Participants Replies Views Activity
General · by Andy Miller, 7 days ago
0 117 7 days ago
General · by lynbor, 1 month ago
3 445 2 weeks ago
General · by lynbor, 3 weeks ago
7 564 2 weeks ago
General · by Harry, 2 weeks ago
0 164 2 weeks ago
General · by Old Man Umby, 1 month ago
2 310 4 weeks ago