silverstripe-labs/silverstripe-iframe — pull request #5 by silverstripe-elliot (2014-07-14 02:04:36+00:00)
Title: disallow javascript protocol in IFrameURL

An authenticated user is allowed to publish URLs containing the javascript: protocol. This pull request will throw an error if this protocol is used