diff --git a/e107_files/bbcode/link.bb b/e107_files/bbcode/link.bb index c7a410e24..420365a15 100644 --- a/e107_files/bbcode/link.bb +++ b/e107_files/bbcode/link.bb @@ -17,10 +17,11 @@ if(substr($parm,0,6) == "mailto") if ($parm && $parm != 'external' && strpos($parm, ' ') === FALSE) { $parm = preg_replace('#^external.#is', '', $parm); + if (strtolower(substr($parm,0,11)) == 'javascript:') return ''; return "".$code_text.""; } - else { + if (strtolower(substr($parm,0,11)) == 'javascript:') return ''; return "".$code_text.""; } diff --git a/e107_files/bbcode/url.bb b/e107_files/bbcode/url.bb index 5dce0fa26..600c05892 100644 --- a/e107_files/bbcode/url.bb +++ b/e107_files/bbcode/url.bb @@ -6,9 +6,11 @@ $external = ($pref['links_new_window'] || strpos($parm, 'external') === 0) ? " r if ($parm && $parm != 'external' && strpos($parm, ' ') === FALSE) { $parm = preg_replace('#^external.#is', '', $parm); + if (strtolower(substr($parm,0,11)) == 'javascript:') return ''; return "".$code_text.""; } else { + if (strtolower(substr($parm,0,11)) == 'javascript:') return ''; return "".$code_text.""; }