mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-20 16:04:25 +02:00
Code Issues Projects Releases Wiki Activity

Merge branch 'MDL-83697_main' of https://github.com/PhilippImhof/moodle

Browse Source
This commit is contained in:
Huong Nguyen 2025-03-21 08:36:22 +07:00
commit b497ad9682
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/tests/weblib_format_text_test.php
View File

@ -262,6 +262,11 @@ final class weblib_format_text_test extends \advanced_testcase {
'<img src=x onerror="&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000083&#0000083&#0000039&#0000041">',
'<img src="x" alt="x" />',
],
'IMG border-radius' => [
'<img src=x style="border-radius: 10px;">',
'<img src=x style="border-radius: 10px;">',
'<img src="x" style="border-radius:10px;" alt="x" />',
],
'DIV background-image' => [
'<DIV STYLE="background-image: url(javascript:alert(\'XSS\'))">',
'<DIV STYLE="background-image: url(javascript:alert(\'XSS\'))">',

1
lib/weblib.php
View File

@ -1079,6 +1079,7 @@ function purify_html($text, $options = array()) {
$config->set('HTML.DefinitionID', 'moodlehtml');
$config->set('HTML.DefinitionRev', 7);
$config->set('CSS.Proprietary', true);
$config->set('Cache.SerializerPath', $cachedir);
$config->set('Cache.SerializerPermissions', $CFG->directorypermissions);
$config->set('Core.NormalizeNewlines', false);