From 996000dfd8ec298822d5fb607756fa2c881fce39 Mon Sep 17 00:00:00 2001 From: ovclas Date: Fri, 17 Aug 2012 09:18:35 +0000 Subject: [PATCH] issue 2239 remove ext check in iframe tag. iframe tag shoud check only white domain list git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.3.1@11042 201d5d3c-b55e-5fd7-737f-ddc643e51545 --- classes/security/EmbedFilter.class.php | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/classes/security/EmbedFilter.class.php b/classes/security/EmbedFilter.class.php index ac6c24191..446144695 100644 --- a/classes/security/EmbedFilter.class.php +++ b/classes/security/EmbedFilter.class.php @@ -400,7 +400,6 @@ class EmbedFilter foreach($iframeTagList AS $key=>$iframeTag) { $isWhiteDomain = true; - $isWhiteExt = true; $ext = ''; $parser = new HtmlParser($iframeTag); @@ -420,12 +419,7 @@ class EmbedFilter } } - if(!$isWhiteDomain && $ext) - { - $isWhiteExt = $this->isWhiteExt($ext); - } - - if(!$isWhiteDomain && !$isWhiteExt) + if(!$isWhiteDomain) { $content = str_replace($iframeTag, '', $content); }