Changes from tags/6.2/src/js/_enqueues/wp/embed.js at r59504 to tags/6.2.1/src/js/_enqueues/wp/embed.js at r59504

File:

• tags/6.2.1/src/js/_enqueues/wp/embed.js (modified) (2 diffs)

tags/6.2.1/src/js/_enqueues/wp/embed.js

@@ -50 +50 @@
         var iframes = document.querySelectorAll( 'iframe[data-secret="' + data.secret + '"]' ),
             blockquotes = document.querySelectorAll( 'blockquote[data-secret="' + data.secret + '"]' ),
+            allowedProtocols = new RegExp( '^https?:$', 'i' ),
             i, source, height, sourceURL, targetURL;
 
@@ -84 +85 @@
                 sourceURL.href = source.getAttribute( 'src' );
                 targetURL.href = data.value;
+
+                /* Only follow link if the protocol is in the allow list. */
+                if ( ! allowedProtocols.test( targetURL.protocol ) ) {
+                    continue;
+                }
 
                 /* Only continue if link hostname matches iframe's hostname. */