Merge pull request markedjs#537 from evilpacket/no-vbscript

blacklist vbscript: fixes markedjs#492
zergeborg · Jan 25, 2015 · 487c410 · 487c410
2 parents 0c852db + fc372d1
commit 487c410
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/marked.js b/lib/marked.js
@@ -868,7 +868,7 @@ Renderer.prototype.link = function(href, title, text) {
     } catch (e) {
       return '';
     }
-    if (prot.indexOf('javascript:') === 0) {
+    if (prot.indexOf('javascript:') === 0 || prot.indexOf('vbscript:') === 0) {
       return '';
     }
   }