From b58864792de7aedf7b1a0d6862b2e2177e0a277e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torkel=20=C3=96degaard?= <torkel@grafana.org>
Date: Wed, 16 Sep 2020 11:15:56 +0200
Subject: [PATCH] NewsPanel: Fixed XSS issue when rendering rss links (#27612)

---
 public/app/plugins/panel/news/NewsPanel.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/app/plugins/panel/news/NewsPanel.tsx b/public/app/plugins/panel/news/NewsPanel.tsx
index e52ca149e3c..4560237a2ad 100755
--- a/public/app/plugins/panel/news/NewsPanel.tsx
+++ b/public/app/plugins/panel/news/NewsPanel.tsx
@@ -77,7 +77,7 @@ export class NewsPanel extends PureComponent<Props, State> {
         {news.map((item, index) => {
           return (
             <div key={index} className={styles.item}>
-              <a href={item.link} target="_blank">
+              <a href={textUtil.sanitizeUrl(item.link)} target="_blank">
                 <div className={styles.title}>{item.title}</div>
                 <div className={styles.date}>{dateTimeFormat(item.date, { format: 'MMM DD' })} </div>
               </a>