Expanded url protocol check to allow https, mailto and protocol-less …

…URLs. Fixes: #180
refactory-id · Dec 14, 2015 · 5953ec5 · 5953ec5
1 parent c2fb640
commit 5953ec5
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/js/bootstrap-markdown.js b/js/bootstrap-markdown.js
@@ -1037,7 +1037,8 @@
 
             link = prompt(e.__localize('Insert Hyperlink'),'http://');
 
-            if (link !== null && link !== '' && link !== 'http://' && link.substr(0,4) === 'http') {
+            var urlRegex = new RegExp('^((http|https)://|(mailto:)|(//))[a-z0-9]', 'i');
+            if (link !== null && link !== '' && link !== 'http://' && urlRegex.test(link)) {
               var sanitizedLink = $('<div>'+link+'</div>').text();
 
               // transform selection and set the cursor into chunked text
@@ -1066,7 +1067,8 @@
 
             link = prompt(e.__localize('Insert Image Hyperlink'),'http://');
 
-            if (link !== null && link !== '' && link !== 'http://' && link.substr(0,4) === 'http') {
+            var urlRegex = new RegExp('^((http|https)://|(//))[a-z0-9]', 'i');
+            if (link !== null && link !== '' && link !== 'http://' && urlRegex.test(link)) {
               var sanitizedLink = $('<div>'+link+'</div>').text();
 
               // transform selection and set the cursor into chunked text