From 9d2e2a1ea230fe7708862aa18672b394a14f5431 Mon Sep 17 00:00:00 2001 From: Felix Rindt Date: Tue, 24 Apr 2018 17:20:47 +0200 Subject: [PATCH] Fix #881 -- dont redirect tel scheme (#883) --- src/pretix/base/templatetags/rich_text.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pretix/base/templatetags/rich_text.py b/src/pretix/base/templatetags/rich_text.py index 682ce0cb3a..98d5435776 100644 --- a/src/pretix/base/templatetags/rich_text.py +++ b/src/pretix/base/templatetags/rich_text.py @@ -63,7 +63,7 @@ ALLOWED_PROTOCOLS = ['http', 'https', 'mailto', 'tel'] def safelink_callback(attrs, new=False): url = attrs.get((None, 'href'), '/') - if not is_safe_url(url) and not url.startswith('mailto:'): + if not is_safe_url(url) and not url.startswith('mailto:') and not url.startswith('tel:'): signer = signing.Signer(salt='safe-redirect') attrs[None, 'href'] = reverse('redirect') + '?url=' + urllib.parse.quote(signer.sign(url)) attrs[None, 'target'] = '_blank'