diff --git a/src/pretix/base/templatetags/rich_text.py b/src/pretix/base/templatetags/rich_text.py index 1057d74ce..682ce0cb3 100644 --- a/src/pretix/base/templatetags/rich_text.py +++ b/src/pretix/base/templatetags/rich_text.py @@ -58,6 +58,8 @@ ALLOWED_ATTRIBUTES = { # Update doc/user/markdown.rst if you change this! } +ALLOWED_PROTOCOLS = ['http', 'https', 'mailto', 'tel'] + def safelink_callback(attrs, new=False): url = attrs.get((None, 'href'), '/') @@ -86,7 +88,8 @@ def markdown_compile(source): ] ), tags=ALLOWED_TAGS, - attributes=ALLOWED_ATTRIBUTES + attributes=ALLOWED_ATTRIBUTES, + protocols=ALLOWED_PROTOCOLS, )