Links to protocol sftp:// are partly removed in newer versions #6186

New issue

Closed

opened 2026-08-18 13:17:03 +02:00 by Thomas-Kastanie · 1 comment

Thomas-Kastanie commented

2026-08-18 13:17:03 +02:00

Describe the Bug

I have a lot of deep links to fileservers like this:

<a href="sftp://ssh-w0123456@v12345.myserver.com/">Winscp Login</a>

This worked fine for a long time, but in the last months, all the references (href="") are removed from the pages.

Steps to Reproduce

Edit a page
Paste <a href="sftp://ssh-w0123456@v12345.myserver.com/">Winscp Login</a> as source or manually create the link or copy&paste it from a web page
Save
The A element is there but the href="" attribute is gone.

Expected Behaviour

If there is a link, keep the reference.

Screenshots or Additional Context

No response

Browser Details

Chrome on Windows 11

Exact BookStack Version

v26.05.3

### Describe the Bug I have a lot of deep links to fileservers like this: `<a href="sftp://ssh-w0123456@v12345.myserver.com/">Winscp Login</a>` This worked fine for a long time, but in the last months, all the references (href="") are removed from the pages. ### Steps to Reproduce 1. Edit a page 2. Paste `<a href="sftp://ssh-w0123456@v12345.myserver.com/">Winscp Login</a>` as source or manually create the link or copy&paste it from a web page 3. Save 4. The A element is there but the href="" attribute is gone. ### Expected Behaviour If there is a link, keep the reference. ### Screenshots or Additional Context _No response_ ### Browser Details Chrome on Windows 11 ### Exact BookStack Version v26.05.3

Thomas-Kastanie added the

Type

Bug Report

label

2026-08-18 13:17:03 +02:00

danb added this to the v26.05.4 milestone

2026-08-22 23:54:55 +02:00

danb referenced this issue from a commit

2026-08-22 23:55:46 +02:00

Content filtering: Fixed sftp protocols being removed

danb commented

2026-08-22 23:57:02 +02:00

Owner

Thanks @Thomas-Kastanie,
This would have been due to me missing SFTP as a protocol to allow when setting up extra allow-list based content filtering.
I've now added sftp back in as part of commit 8f8a6ebf6a
This will be part of the next patch release (due for release early next week).

Thanks @Thomas-Kastanie, This would have been due to me missing SFTP as a protocol to allow when setting up extra allow-list based content filtering. I've now added sftp back in as part of commit 8f8a6ebf6aea55db91fbff91f1a56a9ffa52f58f This will be part of the next patch release (due for release early next week).

❤️ 1

danb closed this issue

2026-08-22 23:57:03 +02:00

danb referenced this issue from a commit

2026-08-24 01:13:54 +02:00

Page filtering: Fixed allow list stripping sftp and fragment links