chore: fix some security issues in markdown (#20639)

2025-06-04 15:56:29 +08:00
parent 006496f24e
commit d22c351221
3 changed files with 13 additions and 13 deletions
--- a/web/app/components/base/markdown-blocks/utils.ts
+++ b/web/app/components/base/markdown-blocks/utils.ts
@@ -0,0 +1,3 @@
+export const isValidUrl = (url: string): boolean => {
+  return ['http:', 'https:', '//', 'mailto:'].some(prefix => url.startsWith(prefix))
+}