From 30cf5e074151a3b838c2866b1b60a9ad587d39dd Mon Sep 17 00:00:00 2001 From: Jeremy Mouton Date: Wed, 5 Nov 2025 18:04:19 +0100 Subject: [PATCH] Potential fix for code scanning alert no. 1: Incomplete URL scheme check Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- interfaces/http/app/proxy.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/interfaces/http/app/proxy.go b/interfaces/http/app/proxy.go index a4e094a..3028f94 100644 --- a/interfaces/http/app/proxy.go +++ b/interfaces/http/app/proxy.go @@ -452,7 +452,7 @@ func (ctrl *ProxyController) rewriteURL(urlStr string, baseURL *url.URL, proxyBa // Ne pas proxifier les URLs data:, blob:, about:, javascript:, etc. if strings.HasPrefix(urlStr, "data:") || strings.HasPrefix(urlStr, "blob:") || strings.HasPrefix(urlStr, "about:") || strings.HasPrefix(urlStr, "javascript:") || - strings.HasPrefix(urlStr, "mailto:") || strings.HasPrefix(urlStr, "tel:") { + strings.HasPrefix(urlStr, "vbscript:") || strings.HasPrefix(urlStr, "mailto:") || strings.HasPrefix(urlStr, "tel:") { return urlStr }