Commit 2864389000

2864389000ad4d5c26ba66a3475b68807c07d484

parent: 10408fa629

Unsigned

cmc <hello@cleberg.net> · 2026-08-08 20:32 UTC

Harden README WebView allow-list: drop data: scheme

Layout: unified · split

Hutch/Views/Repositories/ReadmeView.swift +1 −1
@@ -1028,7 +1028,7 @@ nonisolated func isAllowedReadmeNavigationURL(_ url: URL) -> Bool {
1028 guard let scheme = url.scheme?.lowercased() else { 1028 guard let scheme = url.scheme?.lowercased() else {
1029 return false 1029 return false
1030 } 1030 }
1031 if scheme == "about" || scheme == "data" { 1031 if scheme == "about" {
1032 return true 1032 return true
1033 } 1033 }
1034 guard let sanitizedURL = sanitizedReadmeLinkURLString(url.absoluteString) else { 1034 guard let sanitizedURL = sanitizedReadmeLinkURLString(url.absoluteString) else {