fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-09 12:02:24 +09:00
Code Issues Projects Releases Packages Wiki Activity

Move whitelist file to common location

Browse source
This commit is contained in:
Kijin Sung 2016-02-16 15:27:41 +09:00
parent e7bacf689a
commit a1e8d14b0d
2 changed files with 15 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
classes/security/EmbedFilter.class.php
View file

@ -15,7 +15,6 @@ class EmbedFilter
* @var int * @var int
*/ */
var $allowscriptaccessKey = 0; var $allowscriptaccessKey = 0;
var $whiteUrlDefaultFile = './classes/security/conf/whitelist.php';
var $whiteUrlList = array(); var $whiteUrlList = array();
var $whiteIframeUrlList = array(); var $whiteIframeUrlList = array();
var $mimeTypeList = array(); var $mimeTypeList = array();
@ -257,8 +256,7 @@ class EmbedFilter
*/ */
function _makeWhiteDomainList($whitelist = NULL) function _makeWhiteDomainList($whitelist = NULL)
{ {
$whiteUrlDefaultFile = FileHandler::getRealPath($this->whiteUrlDefaultFile); $whiteUrlDefaultList = (include RX_BASEDIR . 'common/defaults/whitelist.php');
$whiteUrlDefaultList = (include $whiteUrlDefaultFile);
$this->extList = $whiteUrlDefaultList['extensions']; $this->extList = $whiteUrlDefaultList['extensions'];
$this->mimeTypeList = $whiteUrlDefaultList['mime']; $this->mimeTypeList = $whiteUrlDefaultList['mime'];
$this->whiteUrlList = array(); $this->whiteUrlList = array();

17
classes/security/conf/whitelist.php → common/defaults/whitelist.php
View file

@ -1,8 +1,15 @@
<?php <?php
/**
* Rhymix Default iframe/object/iframe Whitelist
*
* Copyright (c) Rhymix Developers and Contributors
*/
return array( return array(
// Allowed domains in <object> or <embed> tag /**
* Allowed domains in <object> or <embed> tag
*/
'object' => array( 'object' => array(
// YouTube // YouTube
'www.youtube.com/', 'www.youtube.com/',
@ -49,7 +56,9 @@ return array(
'sbsplayer.sbs.co.kr/', 'sbsplayer.sbs.co.kr/',
), ),
// Allowed domains in <iframe> tag /**
* Allowed domains in <iframe> tag
*/
'iframe' => array( 'iframe' => array(
// YouTube // YouTube
'www.youtube.com/', 'www.youtube.com/',
@ -69,7 +78,9 @@ return array(
'afree.ca/', 'afree.ca/',
), ),
// Allowed extensions /**
* Allowed extensions in <object> or <embed> tag
*/
'extensions' => array( 'extensions' => array(
'123' => 1, '123' => 1,
'3ds' => 1, '3ds' => 1,