href_sanitizer 0.1.2

Drop-in Rails engine that patches link_to to block dangerous protocols (javascript:, data:, vbscript:) and provides a URL validator to prevent SSRF via private/local IP resolution.

Gemfile:
=

install:
=

Versions:

0.1.2 April 15, 2026 (8 KB)
0.1.1 April 15, 2026 (8 KB)
0.1.0 April 15, 2026 (8 KB)

Runtime Dependencies (3):

addressable ~> 2.8

rails >= 7.0

rails-html-sanitizer >= 1.6

Show all transitive dependencies

Owners:

Pushed by:

Authors:

mfo

SHA 256 checksum:

=