Ticket #9289: 9289.patch

_source/lang/en.js

@@ -120 +120 @@
                 alignTop                : 'Top',
                 alignMiddle             : 'Middle',
                 alignBottom             : 'Bottom',
+                invalidValue    : 'Invalid value.',
                 invalidHeight   : 'Height must be a number.',
                 invalidWidth    : 'Width must be a number.',
                 invalidCssLength        : 'Value specified for the "%1" field must be a positive number with or without a valid CSS measurement unit (px, %, in, cm, mm, em, ex, pt, or pc).',

_source/plugins/link/dialogs/link.js

@@ -503 +503 @@
                                                                                                         dialog.getValueOf( 'info', 'linkType' ) != 'url' )
                                                                                                 return true;
 
+                                                                                        if ( (/javascript\:/).test( this.getValue() ) ) {
+                                                                                                alert( commonLang.invalidValue );
+                                                                                                return false;
+                                                                                        }
+
                                                                                         if ( this.getDialog().fakeObj ) // Edit Anchor.
                                                                                                 return true;