For axios#2646

ZeroCho · Jan 16, 2020 · 17f9ca0 · 17f9ca0
1 parent ad4f75a
commit 17f9ca0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/helpers/isValidXss.js b/lib/helpers/isValidXss.js
@@ -2,7 +2,7 @@
 
 module.exports = function isValidXss(requestURL) {
   var xssEventRegex = /(\b)on(click|error|load|mouse\w+|key\w+|focus\w?|blur|change|input|drag\w?|resize|dbclick|contextmenu|drop|select|message|scroll)=/;
-  var xssJSRegex = /javascript|(<\s*)(\/*)script/gi;
+  var xssJSRegex = /javascript:|(<\s*)(\/*)script/gi;
   return xssJSRegex.test(requestURL) || xssEventRegex.test(requestURL);
 };