Fix Incomplete URL substring sanitization (#706)

GSA · Dec 3, 2024 · e931116 · e931116
1 parent e497691
commit e931116
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/training-front-end/src/plugins/uswds_links.js b/training-front-end/src/plugins/uswds_links.js
@@ -18,8 +18,11 @@ export function processLinksPlugin() {
           // these will all be local, so ignore
           return
         }
-
-        if (!(domain.hostname === 'gsa.gov' || domain.hostname === 'www.gsa.gov'|| domain.protocol === 'mailto:')) {
+        const internalHost = [
+          'gsa.gov',
+          'www.gsa.gov'
+        ]
+        if (!(internalHost.includes(domain.hostname) || domain.protocol === 'mailto:')) {
           properties.className += ' usa-link--external'
         }