Commits on Nov 20, 2023

1. fix(extension-youtube) XSS risk with src tag …

   Fixes risks outline in ueberdosis#4600 by verifying that any src urls are valid
   youtube URLs before rendering as HTML. My thoughts are that this attack
   vector would be difficult to use because the attacker would have to have
   a way to manipualte the TipTap payload in a manner that bypasses the
   youtube extension's `setYoutubeVideo` command, which already checks for
   valid URLs.

   

   C-Hess authored and janthurau committed Nov 20, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 04a1135
   • Browse repository at this point

   Copy the full SHA

   04a1135 View commit details

   Browse the repository at this point in the history

2. fix(extension-youtube) Add fix for link too

   

   C-Hess authored and janthurau committed Nov 20, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 7debf2b
   • Browse repository at this point

   Copy the full SHA

   7debf2b View commit details

   Browse the repository at this point in the history

3. fix(extension-youtube) change regex to disallow non-youtube domains

   

   BTCameronHessler authored and janthurau committed Nov 20, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 1bd714a
   • Browse repository at this point

   Copy the full SHA

   1bd714a View commit details

   Browse the repository at this point in the history

4. fix(extension-youtube) fix lint

   

   C-Hess authored and janthurau committed Nov 20, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for e6947ba
   • Browse repository at this point

   Copy the full SHA

   e6947ba View commit details

   Browse the repository at this point in the history