Cameron Hessler 04a11355a7 fix(extension-youtube) XSS risk with src tag ... Fixes risks outline in #4600 by verifying that any src urls are valid youtube URLs before rendering as HTML. My thoughts are that this attack vector would be difficult to use because the attacker would have to have a way to manipualte the TipTap payload in a manner that bypasses the youtube extension's `setYoutubeVideo` command, which already checks for valid URLs.		2023-11-20 18:48:22 +01:00
..
bold.spec.ts	test bold and link regex	2020-10-08 14:39:44 +02:00
codeBlockLowlight.spec.ts	fix(tests): fix failing cypress tests and update cypress	2022-09-26 11:06:01 +02:00
youtube.spec.ts	fix(extension-youtube) XSS risk with src tag	2023-11-20 18:48:22 +01:00