Commit 2864389000

2864389000ad4d5c26ba66a3475b68807c07d484

parent: 10408fa629

Unsigned

cmc <hello@cleberg.net> · 2026-08-08 20:32 UTC

Harden README WebView allow-list: drop data: scheme

Layout: unified · split

Hutch/Views/Repositories/ReadmeView.swift +1 −1
@@ -1028,7 +1028,7 @@ nonisolated func isAllowedReadmeNavigationURL(_ url: URL) -> Bool {
10281028 guard let scheme = url.scheme?.lowercased() else {
10291029 return false
10301030 }
1031 if scheme == "about" || scheme == "data" {
1031 if scheme == "about" {
10321032 return true
10331033 }
10341034 guard let sanitizedURL = sanitizedReadmeLinkURLString(url.absoluteString) else {