Improper Link Input Validation leads to Cross-site Scripting (XSS)

Description The link input validation is not filtered protocol javascript of href attribute. It allows attackers to inject malicious links to many fields of the website, such as author introduction, user summary, and book description, ... which could execute javascript code XSS. Proof of Concept...

WS-2022-0223

Improper Link Input Validation leads to Cross-site Scripting XSS in bookwyrm-social/bookwyrm before 0.4.1...