mirror of
https://github.com/phpbb/phpbb.git
synced 2025-07-30 21:40:43 +02:00
[ticket/security/257] Enforce http(s) for URLs in image BBCode
SECURITY-257
This commit is contained in:
@@ -132,6 +132,10 @@ class phpbb_textformatter_s9e_default_formatting_test extends phpbb_test_case
|
||||
'[img]https://area51.phpbb.com/images/area51.png[/img]',
|
||||
'<img src="https://area51.phpbb.com/images/area51.png" class="postimage" alt="Image">'
|
||||
),
|
||||
array(
|
||||
'[img]foo://area51.phpbb.com/images/area51.png[/img]',
|
||||
'[img]foo://area51.phpbb.com/images/area51.png[/img]'
|
||||
),
|
||||
array(
|
||||
'[url]https://area51.phpbb.com/[/url]',
|
||||
'<a href="https://area51.phpbb.com/" class="postlink">https://area51.phpbb.com/</a>'
|
||||
|
Reference in New Issue
Block a user