mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-11 00:54:49 +02:00
Code Issues Releases Wiki Activity

Fixes #4486 - Invalid attributes not being fully filtered.

Browse Source
This commit is contained in:
Cameron
2021-04-12 11:13:37 -07:00
parent 444d8d6dc0
commit 8f7ab86413
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
e107_handlers/e_parse_class.php
View File

@@ -4955,6 +4955,7 @@ class e_parse
continue;
}
$removeAttributes = array();
foreach($node->attributes as $attr)
{
$name = $attr->nodeName;
@@ -4962,8 +4963,6 @@ class e_parse
$allow = isset($this->allowedAttributes[$tag]) ? $this->allowedAttributes[$tag] : $this->allowedAttributes['default'];
$removeAttributes = array();
if(!in_array($name, $allow))
{