[checkmk-commits] [tribe29/checkmk] 4a9ab4: 13195 SEC Add validation to Documentation URL

Branch: refs/heads/master Home: https://github.com/tribe29/checkmk Commit: 4a9ab4d6f58245cad6892e39fa15c557c25a745f https://github.com/tribe29/checkmk/commit/4a9ab4d6f58245cad6892e39fa15c557c… Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com> Date: 2021-12-17 (Fri, 17 Dec 2021) Changed paths: A .werks/13195 M cmk/gui/plugins/sidebar/bookmarks.py M cmk/gui/utils/__init__.py M cmk/gui/valuespec.py M cmk/utils/regex.py M tests/unit/cmk/gui/test_http.py M tests/unit/cmk/gui/test_index.py M tests/unit/cmk/test_update_config.py Log Message: ----------- 13195 SEC Add validation to Documentation URL Previous to this Werk the URLs to Documentation were not validated (e.g. in the rule creation dialog). This could have lead to malicious links, e.g. links containing javascript. These links now will be validated. The URL schemes are now restricted to "http" and "https". CMK-9254 Change-Id: Ie5750a02b0ad62ebc51d63a176bbf55e033db5c1