XSS Defense

git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.3.2@11091 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ovclas 2012-08-27 06:16:41 +00:00
parent f5b0d52f3e
commit d884a771ca

View file

@ -855,6 +855,15 @@
}
}
}
if($tag == 'img')
{
$attribute = strtolower(trim($name));
if(strpos(strtolower($val), 'data:') === 0)
{
continue;
}
}
$val = str_replace('"', '"', $val);
$attr[] = $name."=\"{$val}\"";
}