We should consider "internal" as a safe protocol in the filter_allowed_protocols variable.
See the attached patch.

CommentFileSizeAuthor
#2 filter.patch771 bytesartusamak
filter.patch832 bytesartusamak

Comments

Status: Needs review » Needs work

The last submitted patch, filter.patch, failed testing.

artusamak’s picture

artusamak
he/him
Primary language French
Location Bzh
commented
StatusFileSize
new filter.patch771 bytes

Humm re rolling, generating patch through diff instead of git diff.

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Status: Needs work » Closed (won't fix)

Sorry, this is a custom protocol introduced by a custom/contributed module, which has no official meaning. Drupal core does not use that protocol anywhere, so the module that is introducing that custom protocol is responsible for adding it to the allowed list of protocols.

artusamak’s picture

artusamak
he/him
Primary language French
Location Bzh
commented

What about a hook_protocol_info()? Wouldn't it be a better approach?