You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
That's OK because they are external URLs and the backend should block them.
However, when taking a deeper look at the error, it seems the problem is at the JS level because the url= attribute sent to the backend API is undefined instead the real href from the HTML a tag.
Today I found that if you:
That's OK because they are external URLs and the backend should block them.
However, when taking a deeper look at the error, it seems the problem is at the JS level because the
url=
attribute sent to the backend API isundefined
instead the realhref
from the HTML a tag.The URL hit should be https://test-builds.readthedocs.io/_/api/v3/embed/?url=https://datasette.io/ and the error reported should be
External domain not allowed. domain=datasette.io"
.@zanderle can you take a look at this? 🙏🏼
The text was updated successfully, but these errors were encountered: