Do not allow the steam: URI scheme.

diff --git a/IkiWiki/Plugin/htmlscrubber.pm b/IkiWiki/Plugin/htmlscrubber.pm
index 53d4635d554736c449a2220d43336a7ef5ebf07a..8804daf56985fd458ddfb4f598c5c6364cf69443 100644 (file)
--- a/IkiWiki/Plugin/htmlscrubber.pm
+++ b/IkiWiki/Plugin/htmlscrubber.pm
@@ -27,7 +27,7 @@ sub import { #{{{
                "aim", "callto", "cvs", "ed2k", "feed", "fish", "gg",
                "irc", "ircs", "lastfm", "ldaps", "magnet", "mms",
                "msnim", "notes", "rsync", "secondlife", "skype", "ssh",
-               "sftp", "sms", "steam", "webcal", "ymsgr",
+               "sftp", "sms", "webcal", "ymsgr",
        );
        # data is a special case. Allow data:image/*, but
        # disallow data:text/javascript and everything else.

diff --git a/debian/changelog b/debian/changelog
index 8b6c82568c9822d275038abc860407ebb4bb1fc7..1a43344a492ebe36bc861a311256ebf840a7cc74 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -26,6 +26,7 @@ ikiwiki (2.31.3) unstable; urgency=high
   [ Josh Triplett ]
   * Match literal '.' in URI schemas containing '.', rather than matching any
     character.
+  * Do not allow the steam: URI scheme.
 
  -- Josh Triplett <josh@freedesktop.org>  Sun, 10 Feb 2008 14:48:48 -0800