fix: Incomplete URL scheme check (#175)

MetaMask · Oct 23, 2024 · 179980b · 179980b
1 parent d2ec81f
commit 179980b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -86,7 +86,7 @@ function setupOpenSelfInNewTabLink() {
  */
 function isValidSuspectHref(href: string) {
   /* eslint-disable-next-line */
-  const disallowedProtocols = ['javascript:'];
+  const disallowedProtocols = ['javascript:', 'data:', 'vbscript:'];
   const parsedSuspectHref = new URL(href);
 
   return disallowedProtocols.indexOf(parsedSuspectHref.protocol) < 0;