blacklist vbscript: fixes markedjs#492

rhiokim · Mar 16, 2015 · f9fa1bf · f9fa1bf
1 parent 1c594f4
commit f9fa1bf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/marked.js b/lib/marked.js
@@ -1081,7 +1081,7 @@ Renderer.prototype.link = function(href, title, text) {
     } catch (e) {
       return '';
     }
-    if (prot.indexOf('javascript:') === 0) {
+    if (prot.indexOf('javascript:') === 0 || prot.indexOf('vbscript:') === 0) {
       return '';
     }
   }