Page MenuHomePhabricator

D8963.diff
No OneTemporary

D8963.diff

diff --git a/conf/default.conf.php b/conf/default.conf.php
--- a/conf/default.conf.php
+++ b/conf/default.conf.php
@@ -630,14 +630,6 @@
// be enabled in production.
'phabricator.developer-mode' => false,
- // When users write comments which have URIs, they'll be automatically linked
- // if the protocol appears in this set. This whitelist is primarily to prevent
- // security issues like javascript:// URIs.
- 'uri.allowed-protocols' => array(
- 'http' => true,
- 'https' => true,
- ),
-
// Should Phabricator show beta applications on the homepage
'phabricator.show-beta-applications' => false,
diff --git a/src/applications/config/option/PhabricatorSecurityConfigOptions.php b/src/applications/config/option/PhabricatorSecurityConfigOptions.php
--- a/src/applications/config/option/PhabricatorSecurityConfigOptions.php
+++ b/src/applications/config/option/PhabricatorSecurityConfigOptions.php
@@ -119,6 +119,7 @@
array(
'http' => true,
'https' => true,
+ 'mailto' => true,
))
->setSummary(
pht("Determines which URI protocols are auto-linked."))

File Metadata

Mime Type
text/plain
Expires
Fri, Jul 5, 8:17 AM (3 d, 20 h ago)
Storage Engine
blob
Storage Format
Encrypted (AES-256-CBC)
Storage Handle
6289021
Default Alt Text
D8963.diff (1 KB)

Event Timeline