diff --git a/lib/markdown.ts b/lib/markdown.ts index 8ed936d..873e8e1 100644 --- a/lib/markdown.ts +++ b/lib/markdown.ts @@ -12,7 +12,7 @@ const escapeHtml = (s: string): string => function safeUrl(raw: string): string | null { const u = raw.trim(); if (/^(https?:|mailto:)/i.test(u)) return u; - if (/^\/(?!\/)/.test(u)) return u; // "/path" but not "//host" + if (/^\/(?![/\\])/.test(u)) return u; // "/path" but not "//host" or "/\host" if (/^#/.test(u)) return u; return null; }