rusackas commented on PR #40621: URL: https://github.com/apache/superset/pull/40621#issuecomment-4637871357
Closing this one as superseded. The robust link-protocol sanitizer that this PR was iterating toward (the `transformLinkUri` implementation that strips leading C0 control characters and ignores in-scheme control/whitespace before checking the `javascript:`/`vbscript:`/`data:` blocklist) already landed on master via #40622. After rebasing this branch onto master the diff is empty — there's nothing left here that isn't already shipped. Thanks! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
