mirror of
https://github.com/Lastorder-DC/rhymix.git
synced 2026-01-08 19:21:40 +09:00
태그에서 act 가 포함된 url이 제거되지않도록 변경
This commit is contained in:
parent
a9fc637cd9
commit
4de10a74f2
1 changed files with 0 additions and 18 deletions
|
|
@ -1123,24 +1123,6 @@ function removeSrcHack($match)
|
|||
}
|
||||
}
|
||||
|
||||
$filter_arrts = array('style', 'src', 'href');
|
||||
|
||||
if($tag === 'object') array_push($filter_arrts, 'data');
|
||||
if($tag === 'param') array_push($filter_arrts, 'value');
|
||||
|
||||
foreach($filter_arrts as $attr)
|
||||
{
|
||||
if(!isset($attrs[$attr])) continue;
|
||||
|
||||
$attr_value = rawurldecode($attrs[$attr]);
|
||||
$attr_value = htmlspecialchars_decode($attr_value, ENT_COMPAT);
|
||||
$attr_value = preg_replace('/\s+|[\t\n\r]+/', '', $attr_value);
|
||||
if(preg_match('@(\?|&|;)(act=)@i', $attr_value))
|
||||
{
|
||||
unset($attrs[$attr]);
|
||||
}
|
||||
}
|
||||
|
||||
if(isset($attrs['style']) && preg_match('@(?:/\*|\*/|\n|:\s*expression\s*\()@i', $attrs['style']))
|
||||
{
|
||||
unset($attrs['style']);
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue