moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-04 16:36:37 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

MDL-11413 I hope now it is correct solution

Browse source
This commit is contained in:
skodak 2007-09-25 14:02:53 +00:00
parent e2fa911b73
commit 0352cd2ffa
2 changed files with 1 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/kses.php
View file

@ -470,7 +470,7 @@ function kses_bad_protocol_once($string, $allowed_protocols)
############################################################################### ###############################################################################
{ {
return preg_replace('/^((&[^;]*;|[\sA-Za-z0-9])*)'. return preg_replace('/^((&[^;]*;|[\sA-Za-z0-9])*)'.
'(:|&#0*58;|&#[Xx]3[Aa];)\s*/e', '(:|&#0*58;|&#[Xx]0*3[Aa];)\s*/e',
'kses_bad_protocol_once2("\\1", $allowed_protocols)', 'kses_bad_protocol_once2("\\1", $allowed_protocols)',
$string); $string);
} # function kses_bad_protocol_once } # function kses_bad_protocol_once

2
lib/weblib.php
View file

@ -1842,7 +1842,6 @@ function clean_text($text, $format=FORMAT_MOODLE) {
/// Remove tags that are not allowed /// Remove tags that are not allowed
$text = strip_tags($text, $ALLOWED_TAGS); $text = strip_tags($text, $ALLOWED_TAGS);
$text = str_replace(':', ':', $text);
/// Clean up embedded scripts and , using kses /// Clean up embedded scripts and , using kses
$text = cleanAttributes($text); $text = cleanAttributes($text);
@ -1939,7 +1938,6 @@ function cleanAttributes2($htmlArray){
$value = kses_decode_entities($value); $value = kses_decode_entities($value);
$value = preg_replace('/(&#[0-9]+)(;?)/', "\\1;", $value); $value = preg_replace('/(&#[0-9]+)(;?)/', "\\1;", $value);
$value = preg_replace('/(&#x[0-9a-fA-F]+)(;?)/', "\\1;", $value); $value = preg_replace('/(&#x[0-9a-fA-F]+)(;?)/', "\\1;", $value);
$value = str_replace(':', '', $value); //better not have these characters in output at all
if ($value === $prevvalue) { if ($value === $prevvalue) {
$arreach['value'] = $value; $arreach['value'] = $value;
break; break;