From 85ab4d6c9f9c9d90bde7b898e064ac154abf1746 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 29 Dec 2025 10:30:32 +0000 Subject: [PATCH] restrict background protocols and document scaling Co-authored-by: Sunwuyuan <88357633+Sunwuyuan@users.noreply.github.com> --- src/pages/index.vue | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/src/pages/index.vue b/src/pages/index.vue index f440a9e..f73ebd8 100644 --- a/src/pages/index.vue +++ b/src/pages/index.vue @@ -2218,7 +2218,7 @@ export default { try { const parsed = new URL(trimmed, window.location.origin); const protocol = parsed.protocol.replace(":", ""); - if (!["http", "https", "blob"].includes(protocol)) return false; + if (!["http", "https"].includes(protocol)) return false; if (parsed.pathname.includes("..")) return false; return true; } catch (e) { @@ -2238,10 +2238,7 @@ export default { if (typeof CSS !== "undefined" && CSS.escape) { return CSS.escape(value); } - return value - .replace(/["'\\]/g, "\\$&") - .replace(/[\n\r\f]/g, "") - .replace(/[^a-zA-Z0-9_\-/:.@%?#=&]/g, (char) => `\\${char}`); + return encodeURI(value); }, safeBase64Decode(base64String) { @@ -2454,6 +2451,6 @@ export default { } .home-background { - transform: scale(1.02); + transform: scale(1.02); /* slight zoom to mask blur edges */ }