Allow mailto links in URL field
Posted 09 June 2012 - 03:20 AM
I know it's possible to bypass this by typing "mailto://", but a ) that's non-standard and b ) that's not something a typical user would try.. instead they keep asking me what to do
Is there any way this could be implemented in URL field -- or if this is a feature of sanitizer, could that rather be updated to recognize mailto links as standard URLs, or would that cause problems elsewhere?
Posted 09 June 2012 - 03:53 AM
Also: mailto is valid URI scheme and "mailto:email@example.com" is valid URL, so I'd consider it a bit strange for the URL field not to support it. Perhaps I'm just being too strict here, but that's how I see this
Posted 09 June 2012 - 06:03 AM
Perhaps I'm misunderstanding your point but if I am, then what I've misunderstood is scaring me a little .
Posted 09 June 2012 - 10:44 AM
There are many situations where you'd want to disallow mailto links (such as when looking for HTTP URLs), but also many situations where you'd want to allow them. The way URL field currently works seems to be that it allows _any_ real or imaginary protocol, as long as they conform to certain syntax. It had no problems with "htpsss", for an example.
Just to make things clear, what I'm suggesting here is only adding support for standard "mailto:" syntax.. and to be honest I don't see that as a huge change, since nonstandard "mailto://" is already supported and thus URL field already is pretty generic
Posted 11 June 2012 - 01:46 PM
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users