Jakub Zych c8e0961740 fix: social images are validated on the API, MCP, batch and import paths (WR-16) ...

Only the admin seoimage field refused values that are not a path or an
http(s) URL; SetURLSEO, SaveRule and SaveSettings stored javascript:,
data: or protocol-relative values, which /resolve then served as
og:image. All three now refuse them with image.url_invalid.

2026-10-27 15:35:02 +01:00

9.9 KiB

Raw Blame History

View Raw