krz/hutch

an ios client for sourcehut

clone: git clone https://gitbay.org/krz/hutch.git

c00e30353dd677e207ae305928df790e499fe085

unsigned

author: Christian Cleberg <hello@cleberg.net> · 2026-08-08T20:32:25Z

Harden README WebView allow-list: drop data: scheme

 Hutch/Views/Repositories/ReadmeView.swift | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Hutch/Views/Repositories/ReadmeView.swift b/Hutch/Views/Repositories/ReadmeView.swift
index 722af8d..33ad54d 100644
--- a/Hutch/Views/Repositories/ReadmeView.swift
+++ b/Hutch/Views/Repositories/ReadmeView.swift
@@ -1028,7 +1028,7 @@ nonisolated func isAllowedReadmeNavigationURL(_ url: URL) -> Bool {
     guard let scheme = url.scheme?.lowercased() else {
         return false
     }
-    if scheme == "about" || scheme == "data" {
+    if scheme == "about" {
         return true
     }
     guard let sanitizedURL = sanitizedReadmeLinkURLString(url.absoluteString) else {