fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-11 14:32:14 +09:00
Code Issues Projects Releases Packages Wiki Activity

issue 2239 remove ext check in iframe tag.

Browse source 
iframe tag shoud check only white domain list


git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.3.1@11042 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ovclas 2012-08-17 09:18:35 +00:00
parent 6a633b3cb4
commit 996000dfd8
1 changed files with 1 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

8
classes/security/EmbedFilter.class.php
View file

@ -400,7 +400,6 @@ class EmbedFilter
foreach($iframeTagList AS $key=>$iframeTag)
{
$isWhiteDomain = true;
$isWhiteExt = true;
$ext = '';
$parser = new HtmlParser($iframeTag);
@ -420,12 +419,7 @@ class EmbedFilter
}
}
if(!$isWhiteDomain && $ext)
{
$isWhiteExt = $this->isWhiteExt($ext);
}
if(!$isWhiteDomain && !$isWhiteExt)
if(!$isWhiteDomain)
{
$content = str_replace($iframeTag, '', $content);
}