Convert outdated <script language="javascript"> to <script> #2615

This commit is contained in:
Kijin Sung 2025-11-22 21:47:25 +09:00
parent e586552b29
commit 385067b005
2 changed files with 5 additions and 2 deletions

View file

@ -139,7 +139,7 @@ class Context
*/
private static $_check_patterns = array(
'@<(?:\?|%)@' => 'DENY ALL',
'@<script\s*?language\s*?=@i' => 'DENY ALL',
'@<script\s*?language\s*?=\s*?(?![\'"]javascript[\'"])@i' => 'DENY ALL',
'@</?script@i' => 'ALLOW ADMIN ONLY',
);