mirror of
https://github.com/mermaid-js/mermaid.git
synced 2025-09-19 23:39:50 +02:00
#847 Handling of embedded javascript in links
This commit is contained in:
@@ -214,7 +214,11 @@ const setClickFun = function (id, functionName) {
|
||||
export const setLink = function (ids, linkStr, tooltip) {
|
||||
ids.split(',').forEach(function (id) {
|
||||
if (typeof vertices[id] !== 'undefined') {
|
||||
vertices[id].link = linkStr
|
||||
if (config.securityLevel === 'strict') {
|
||||
vertices[id].link = linkStr.replace(/javascript:.*/g, '')
|
||||
} else {
|
||||
vertices[id].link = linkStr
|
||||
}
|
||||
}
|
||||
})
|
||||
setTooltip(ids, tooltip)
|
||||
|
Reference in New Issue
Block a user