fix(youtube): Incomplete URL substring sanitization

2026-07-13 16:16:46 +08:00 · 2022-08-17 10:18:02 +08:00
parent 8864593882
commit a17ec1c5f9
1 changed files with 3 additions and 1 deletions
@@ -19,7 +19,9 @@ export class YoutubeBlock extends BaseView {
        const tag_name = el.tagName;
        if (tag_name === 'A' && el.parentElement?.childElementCount === 1) {
            const href = el.getAttribute('href');
-            if (href.indexOf('.youtube.com') !== -1) {
+            const allowedHosts = ['.youtube.com'];
+
+            if (allowedHosts.includes(href)) {
                return [
                    {
                        type: this.type,