fix(extension-link): extract the scheme from the URL before checking …

…whether it's javascript
ueberdosis · May 16, 2024 · f95429c · f95429c
1 parent b79de07
commit f95429c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/extension-link/src/link.ts b/packages/extension-link/src/link.ts
@@ -163,7 +163,7 @@ export const Link = Mark.create<LinkOptions>({
   renderHTML({ HTMLAttributes }) {
     // False positive; we're explicitly checking for javascript: links to ignore them
     // eslint-disable-next-line no-script-url
-    if (HTMLAttributes.href?.toLowerCase().trim().startsWith('javascript:')) {
+    if (HTMLAttributes.href?.substring(0, HTMLAttributes.href.indexOf(':')).toLowerCase().trim() === 'javascript') {
       // strip out the href
       return ['a', mergeAttributes(this.options.HTMLAttributes, { ...HTMLAttributes, href: '' }), 0]
     }