OTWO-7716 CWE-79/CWE-20: javascript: URI accepted in Homepage URL fie… - #1948

Open

Niharika1117 wants to merge 2 commits into

Commits on Aug 31, 2026

OTWO-7716 CWE-79/CWE-20: javascript: URI accepted in Homepage URL field — no scheme allowlist in validator; unsafe href rendering in profile views
Niharika1117
committed
d0f5d3a
code review
Niharika1117
committed
8da2104