Merge pull request markedjs#537 from evilpacket/no-vbscript

blacklist vbscript: fixes markedjs#492
jhollingworth · Jan 25, 2015 · f49db7c · f49db7c
2 parents 3e02a69 + 3c19114
commit f49db7c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/marked.js b/lib/marked.js
@@ -868,7 +868,7 @@ Renderer.prototype.link = function(href, title, text) {
     } catch (e) {
       return '';
     }
-    if (prot.indexOf('javascript:') === 0) {
+    if (prot.indexOf('javascript:') === 0 || prot.indexOf('vbscript:') === 0) {
       return '';
     }
   }