moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-03 08:09:47 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

MDL-11413 I hope now it is correct solution

Browse source
This commit is contained in:
skodak 2007-09-25 14:02:53 +00:00
parent e2fa911b73
commit 0352cd2ffa
2 changed files with 1 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/kses.php
View file

@ -470,7 +470,7 @@ function kses_bad_protocol_once($string, $allowed_protocols)
###############################################################################
{
return preg_replace('/^((&[^;]*;|[\sA-Za-z0-9])*)'.
'(:|&#0*58;|&#[Xx]3[Aa];)\s*/e',
'(:|&#0*58;|&#[Xx]0*3[Aa];)\s*/e',
'kses_bad_protocol_once2("\\1", $allowed_protocols)',
$string);
} # function kses_bad_protocol_once

2
lib/weblib.php
View file

@ -1842,7 +1842,6 @@ function clean_text($text, $format=FORMAT_MOODLE) {
/// Remove tags that are not allowed
$text = strip_tags($text, $ALLOWED_TAGS);
$text = str_replace(':', ':', $text);
/// Clean up embedded scripts and , using kses
$text = cleanAttributes($text);
@ -1939,7 +1938,6 @@ function cleanAttributes2($htmlArray){
$value = kses_decode_entities($value);
$value = preg_replace('/(&#[0-9]+)(;?)/', "\\1;", $value);
$value = preg_replace('/(&#x[0-9a-fA-F]+)(;?)/', "\\1;", $value);
$value = str_replace(':', '', $value); //better not have these characters in output at all
if ($value === $prevvalue) {
$arreach['value'] = $value;
break;