@plone/volto 18.10.0 → 18.10.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -17,6 +17,12 @@ myst:
17
17
 
18
18
  <!-- towncrier release notes start -->
19
19
 
20
+ ## 18.10.1 (2025-03-14)
21
+
22
+ ### Bugfix
23
+
24
+ - Fix validation allowing relative URLs when `allowExternals` prop is set. @sneridagh [#6840](https://github.com/plone/volto/issues/6840)
25
+
20
26
  ## 18.10.0 (2025-03-13)
21
27
 
22
28
  ### Feature
package/package.json CHANGED
@@ -9,7 +9,7 @@
9
9
  }
10
10
  ],
11
11
  "license": "MIT",
12
- "version": "18.10.0",
12
+ "version": "18.10.1",
13
13
  "repository": {
14
14
  "type": "git",
15
15
  "url": "git@github.com:plone/volto.git"
@@ -236,8 +236,8 @@
236
236
  "url": "^0.11.3",
237
237
  "use-deep-compare-effect": "1.8.1",
238
238
  "uuid": "^8.3.2",
239
- "@plone/registry": "2.4.1",
240
239
  "@plone/scripts": "3.8.2",
240
+ "@plone/registry": "2.4.1",
241
241
  "@plone/volto-slate": "18.2.3"
242
242
  },
243
243
  "devDependencies": {
@@ -230,7 +230,7 @@ export class ObjectBrowserWidgetComponent extends Component {
230
230
  };
231
231
 
232
232
  validateManualLink = (url) => {
233
- if (this.props.allowExternals) {
233
+ if (this.props.allowExternals && !url.startsWith('/')) {
234
234
  const error = urlValidator({
235
235
  value: url,
236
236
  formatMessage: this.props.intl.formatMessage,