Skip to content

Support allowed scheme with openUrl card action#3226

Merged
compulim merged 7 commits intomicrosoft:masterfrom
compulim:fix-3225
Jun 9, 2020
Merged

Support allowed scheme with openUrl card action#3226
compulim merged 7 commits intomicrosoft:masterfrom
compulim:fix-3225

Conversation

@compulim
Copy link
Copy Markdown
Contributor

@compulim compulim commented Jun 9, 2020

Fixes #3225

Changelog Entry

Breaking changes

  • Affecting Adaptive Card, legacy card and suggested actions
    • For openUrl card action, we are now whitelisting the URL scheme using the same set of whitelist from the default Markdown + sanitize engine, it includes data, http, https, ftp, mailto, sip, and tel
    • To whitelist a different set of URL schemes, please implement the card action middleware to override this behavior

Added

Description

Whitelist both Markdown and openUrl card action with the same list of schemes allowed.

Specific Changes

  • Whitelist allowed scheme in the default card action middleware

  • Testing Added

Comment thread CHANGELOG.md Outdated
Comment thread CHANGELOG.md Outdated
Comment thread packages/component/src/Middleware/CardAction/createCoreMiddleware.js Outdated
@compulim compulim merged commit 484291a into microsoft:master Jun 9, 2020
@compulim compulim deleted the fix-3225 branch June 9, 2020 20:01
@compulim compulim mentioned this pull request Jun 10, 2020
38 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support allowed scheme with openUrl card action

2 participants