diff --git a/e107_handlers/e_parse_class.php b/e107_handlers/e_parse_class.php index d27668902..5974c24bf 100644 --- a/e107_handlers/e_parse_class.php +++ b/e107_handlers/e_parse_class.php @@ -2433,12 +2433,13 @@ class e_parser 'default' => array('id', 'style', 'class'), 'img' => array('id', 'src', 'style', 'class', 'alt', 'title', 'width', 'height'), 'a' => array('id', 'href', 'style', 'class', 'title'), + 'script' => array('type', 'src', 'language') ); private $badAttrValues = array("javascript[\s]*?:","alert\(","vbscript[\s]*?:","data:text\/html", "mhtml[\s]*?:", "data:[\s]*?image"); private $allowedTags = array('html', 'body','div','a','img','table','tr', 'td', 'th', 'tbody', 'thead', 'colgroup', 'b', 'i', 'pre','code', 'strong', 'u', 'em','ul','li','img','h1','h2','h3','h4','h5','h6','p', 'div','pre','section','article', 'blockquote','hgroup','aside','figure','span', 'video', 'br', - 'small', 'caption' + 'small', 'caption', 'noscript' ); private $scriptTags = array('script','applet','iframe'); //allowed whem $pref['post_script'] is enabled.