From 79abc6d1ebc6e8aca7d49aef54f7230edc007a08 Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Tue, 11 Jan 2011 22:01:43 +0100 Subject: [PATCH] MDL-25836 fixed stripped src attribute from script tag --- lib/editor/tinymce/lib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/editor/tinymce/lib.php b/lib/editor/tinymce/lib.php index 5a54a91d955..b0f3bf00a4e 100644 --- a/lib/editor/tinymce/lib.php +++ b/lib/editor/tinymce/lib.php @@ -158,7 +158,7 @@ class tinymce_texteditor extends texteditor { if (empty($CFG->xmlstrictheaders) and (!empty($options['legacy']) or !empty($options['noclean']) or !empty($options['trusted']))) { // now deal somehow with non-standard tags, people scream when we do not make moodle code xtml strict, // but they scream even more when we strip all tags that are not strict :-( - $params['valid_elements'] = '*[*]'; + $params['valid_elements'] = 'script[src|type],*[*]'; // for some reason the *[*] does not inlcude javascript src attribute MDL-25836 $params['invalid_elements'] = ''; }