Changeset 85a9130 in github

Timestamp:

Sep 12, 2008 12:00:25 PM (5 years ago)

Author:

thomascube <thomas@…>

Branches:

master, HEAD, courier-fix, dev-browser-capabilities, pdo, release-0.6, release-0.7, release-0.8

Children:

6cd0099

Parents:

dc5b83d

Message:

Fix xss entitiy decoding

File:

• program/include/main.inc (modified) (1 diff)

program/include/main.inc

@@ -644 +644 @@
 {
   $out = html_entity_decode(html_entity_decode($content));
-  $out = preg_replace('/\\\00([a-z0-9]{2})/ie', "chr(hexdec('\\1'))", $out);
-  $out = preg_replace('#/\*.+\*/#Um', '', $out);
+  $out = preg_replace('/\\\([a-z0-9]{4})/ie', "chr(hexdec('\\1'))", $out);
+  $out = preg_replace('#/\*.*\*/#Um', '', $out);
   return $out;
 }