Commit bcc9a1d0 authored by Dries's avatar Dries

- Backported Marco's first filter patch.

parent 3c3ea8f6
......@@ -301,8 +301,6 @@ function node_conf_filters() {
}
function node_filter_html($text) {
$text = eregi_replace("([ \f\r\t\n\'\"])style=[^>]+>", "\\1", $text);
$text = eregi_replace("([ \f\r\t\n\'\"])on[a-z]+=[^>]+>", "\\1", $text);
$text = strip_tags($text, variable_get("allowed_html", ""));
return $text;
}
......@@ -367,6 +365,11 @@ function node_comment_mode($nid) {
}
function node_filter($text) {
$text = preg_replace("/\Wstyle\s*=[^>]+?>/i", ">", $text);
$text = preg_replace("/\Won[a-z]+\s*=[^>]+?>/i", ">", $text);
$text = preg_replace("/\Wsrc\s*=[\s'\"]*javascript[^>]+?>/i", ">", $text);
$text = preg_replace("/\Whref\s*=[\s'\"]*javascript:[^>]+?>/i", ">", $text);
if (variable_get("filter_html", 0)) $text = node_filter_html($text);
if (variable_get("filter_link", 0)) $text = node_filter_link($text);
return node_filter_line($text);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment