CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

Rich text: Do not rewrite mailto: URLs

Browse Source
This commit is contained in:
Raphael Michel
2017-09-25 09:37:17 +02:00
parent e3798600ed
commit 9f0deea9dd
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/pretix/base/templatetags/rich_text.py
View File

@@ -56,7 +56,7 @@ ALLOWED_ATTRIBUTES = {
def safelink_callback(attrs, new=False):
url = attrs.get((None, 'href'), '/')
if not is_safe_url(url):
if not is_safe_url(url) and not url.startswith('mailto:'):
signer = signing.Signer(salt='safe-redirect')
attrs[None, 'href'] = reverse('redirect') + '?url=' + urllib.parse.quote(signer.sign(url))
attrs[None, 'target'] = '_blank'