From bd817c859021d04f10d0079a31867cf36702e15e Mon Sep 17 00:00:00 2001
From: laurenashleigh <lauren.armstrong@grafana.com>
Date: Mon, 17 Nov 2025 16:47:15 +0000
Subject: [PATCH] fix incomplete url scheme check

---
 .../alerting/unified/components/RuleNotificationSection.tsx     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/app/features/alerting/unified/components/RuleNotificationSection.tsx b/public/app/features/alerting/unified/components/RuleNotificationSection.tsx
index 59c755fe3e4..7465eae276a 100644
--- a/public/app/features/alerting/unified/components/RuleNotificationSection.tsx
+++ b/public/app/features/alerting/unified/components/RuleNotificationSection.tsx
@@ -245,7 +245,7 @@ export function RuleNotificationSection() {
                   try {
                     const url = new URL(value);
                     // Reject dangerous URL schemes
-                    if (url.protocol === 'javascript:' || url.protocol === 'data:') {
+                    if (url.protocol === 'javascript:' || url.protocol === 'data:' || url.protocol === 'vbscript:') {
                       notifyApp.error(
                         t(
                           'alerting.simplified.notification.runbook-url.invalid-protocol',