fix: reject TechLog protocol-relative links

2026-08-15 19:10:05 +09:00
parent 8342fb14dc
commit 708680b28e
2 changed files with 6 additions and 1 deletions
@@ -199,6 +199,7 @@ function isSafeLink(href: string): boolean {
    return false;
  }
  if (href.startsWith("#")) return true;
+  if (href.startsWith("//")) return false;
  if (href.startsWith("/")) {
    try {
      return (