Use http_url in Validator instead of url or else people can inject JavaScript.

This commit is contained in:
Zed A. Shaw 2025-07-11 11:11:44 -04:00
parent a3d4a3dc70
commit de24d64f44
2 changed files with 3 additions and 3 deletions

View file

@ -32,8 +32,8 @@
<middle>
<label for="username">Username</label>
<input id="username" name="username" placeholder="Username" type="text">
<label for="email">Email</label>
<input id="email" name="email" placeholder="Email" type="text">
<label for="email">FAKE! Email</label>
<input id="email" name="email" placeholder="fake@faker.com" type="text">
<label for="password">Password</label>
<input id="password" name="password" placeholder="Password" type="password">
</middle>