Fixed FD-55803 - escape links

2026-06-08 16:36:17 +01:00
parent 53599544af
commit df0ee6020a
1 changed files with 2 additions and 1 deletions
@@ -1883,11 +1883,12 @@ class Helper
            // Convert newlines to CommonMark hard breaks for inline rendering
            $text = preg_replace('/(?<! {2})\n/', "  \n", $text);

-            return Str::inlineMarkdown($text, ['html_input' => 'escape']);
+            return Str::inlineMarkdown($text, ['html_input' => 'escape', 'allow_unsafe_links' => false]);
        }

        $html = trim(Str::markdown($text, [
            'html_input' => 'escape',
+            'allow_unsafe_links' => false,
            'renderer' => ['soft_break' => "<br>\n"],
        ]));