mirror_php/typecho
1
0
Fork 0
mirror of https://github.com/typecho/typecho.git synced 2025-01-16 20:18:19 +01:00
Code Issues Projects Releases Wiki Activity

fix #1545 and close #1547

Browse Source
This commit is contained in:
joyqi 2023-03-28 11:36:01 +08:00
parent a609b149e9
commit b989459d87
3 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
var/Widget/Base/Comments.php
View File

@ -268,7 +268,7 @@ class Comments extends Base implements QueryInterface
$noFollow = (null === $noFollow) ? $this->options->commentsUrlNofollow : $noFollow;
if ($this->url && $autoLink) {
echo '<a href="' . $this->url . '"'
echo '<a href="' . Common::safeUrl($this->url) . '"'
. ($noFollow ? ' rel="external nofollow"' : null) . '>' . $this->author . '</a>';
} else {
echo $this->author;

4
var/Widget/Feedback.php
View File

@ -206,7 +206,7 @@ class Feedback extends Comments implements ActionInterface
/** Anti-XSS */
$comment['author'] = $this->request->filter('trim')->author;
$comment['mail'] = $this->request->filter('trim')->mail;
$comment['url'] = $this->request->filter('trim')->url;
$comment['url'] = $this->request->filter('trim', 'url')->url;
/** 修正用户提交的url */
if (!empty($comment['url'])) {
@ -305,7 +305,7 @@ class Feedback extends Comments implements ActionInterface
];
$trackback['author'] = $this->request->filter('trim')->blog_name;
$trackback['url'] = $this->request->filter('trim')->url;
$trackback['url'] = $this->request->filter('trim', 'url')->url;
$trackback['text'] = $this->request->excerpt;
//检验格式

2
var/Widget/Options.php
View File

@ -82,7 +82,7 @@ if (!defined('__TYPECHO_ROOT_DIR__')) {
* @property bool $commentsRequireModeration
* @property bool $commentsWhitelist
* @property bool $commentsRequireMail
* @property bool $commentsRequireURL
* @property bool $commentsRequireUrl
* @property bool $commentsCheckReferer
* @property bool $commentsAntiSpam
* @property bool $commentsAutoClose