mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-21 16:32:18 +02:00
Code Issues Projects Releases Wiki Activity

A fix for kses problems with quotes ...

Browse Source
This commit is contained in:
moodler 2005-05-04 18:25:35 +00:00
parent fd1eb1608a
commit 0549198cf0
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/moodlelib.php
View File

@ -194,6 +194,9 @@ function clean_param($param, $options) {
if ($options & PARAM_CLEAN) {
$param = clean_text($param); // Sweep for scripts, etc
$param = str_replace('"', '\\\\"', $param); // Because clean_text will strip them
// when checking HTML tags ... I'm not
// sure if this is really necessary to replace
}
if ($options & PARAM_INT) {

2
lib/weblib.php
View File

@ -1269,7 +1269,7 @@ function cleanAttributes2($htmlTag){
global $CFG, $ALLOWED_PROTOCOLS;
require_once($CFG->libdir .'/kses.php');
$htmlTag = kses_stripslashes($htmlTag);
$htmlTag = str_replace('\\\\"', '"', $htmlTag);
if (substr($htmlTag, 0, 1) != '<') {
return '&gt;'; //a single character ">" detected
}