From efa135c3f89955af5270fc93718c57b71bd46e7a Mon Sep 17 00:00:00 2001
From: Cameron <cameron@e107coders.org>
Date: Sun, 12 May 2013 04:13:57 -0700
Subject: [PATCH] Closes #283 whitelist <script> attributes and noscript tag
 (when script posting is enabled)

---
 e107_handlers/e_parse_class.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/e107_handlers/e_parse_class.php b/e107_handlers/e_parse_class.php
index d27668902..5974c24bf 100644
--- a/e107_handlers/e_parse_class.php
+++ b/e107_handlers/e_parse_class.php
@@ -2433,12 +2433,13 @@ class e_parser
                                     'default'   => array('id', 'style', 'class'),
                                     'img'       => array('id', 'src', 'style', 'class', 'alt', 'title', 'width', 'height'),
                                     'a'         => array('id', 'href', 'style', 'class', 'title'),
+                                    'script'	=> array('type', 'src', 'language')
                                   ); 
     private $badAttrValues       = array("javascript[\s]*?:","alert\(","vbscript[\s]*?:","data:text\/html", "mhtml[\s]*?:", "data:[\s]*?image");
     private $allowedTags        = array('html', 'body','div','a','img','table','tr', 'td', 'th', 'tbody', 'thead', 'colgroup', 'b', 
                                         'i', 'pre','code', 'strong', 'u', 'em','ul','li','img','h1','h2','h3','h4','h5','h6','p',
                                         'div','pre','section','article', 'blockquote','hgroup','aside','figure','span', 'video', 'br',
-                                        'small', 'caption' 
+                                        'small', 'caption', 'noscript'
                                    );
 	private $scriptTags 		= array('script','applet','iframe'); //allowed whem $pref['post_script'] is enabled.