diff --git a/src/pages/index.vue b/src/pages/index.vue index f73ebd8..5d5608d 100644 --- a/src/pages/index.vue +++ b/src/pages/index.vue @@ -2213,7 +2213,7 @@ export default { isSafeBackgroundUrl(url) { if (!url) return false; const trimmed = url.trim(); - if (trimmed.toLowerCase().startsWith("javascript:")) return false; + if (/^(javascript|data|vbscript):/i.test(trimmed)) return false; try { const parsed = new URL(trimmed, window.location.origin);