From 30e98ec62a21ad43ff4cfb201a0c2f566afe8ec0 Mon Sep 17 00:00:00 2001
From: Dylan Berry <dberry@trivir.com>
Date: Fri, 26 Jun 2026 13:12:15 -0400
Subject: [PATCH] Add otpauth to allowed schemes for anchor elements

---
 packages/platform-shared/src/utils/sanitizerConfig.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages/platform-shared/src/utils/sanitizerConfig.js b/packages/platform-shared/src/utils/sanitizerConfig.js
index da8e4397d..b7eef6ecf 100644
--- a/packages/platform-shared/src/utils/sanitizerConfig.js
+++ b/packages/platform-shared/src/utils/sanitizerConfig.js
@@ -49,6 +49,7 @@ export const baseSanitizerConfig = {
   allowVulnerableTags: true, // removes the warning for style tag please use with caution
   allowedSchemesByTag: {
     ...sanitizeHtml.defaults.allowedSchemesByTag,
+    a: [...sanitizeHtml.defaults.allowedSchemes, 'otpauth'],
     img: [...sanitizeHtml.defaults.allowedSchemes, 'data'],
   },
   transformTags: {