chamilo
/
chamilo-lms
mirror of https://github.com/chamilo/chamilo-lms/tree/1.11.x
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

[svn r14510] Final fix to security flaw from kses library (see FS#2312) - might prevent some style tags to appear right

Browse Source
skala
Yannick Warnier 18 years ago
parent 0d26a174a4
commit 43d2929d62
1 changed files with 10 additions and 10 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 20
      main/inc/lib/formvalidator/Rule/allowed_tags.inc.php

20
main/inc/lib/formvalidator/Rule/allowed_tags.inc.php
Unescape View File

@ -120,7 +120,7 @@ $allowed_tags_student['div'] = array();
$allowed_tags_student['div']['align'] = array();
$allowed_tags_student['div']['class'] = array();
$allowed_tags_student['div']['id'] = array();
$allowed_tags_student['div']['style'] = array();
#$allowed_tags_student['div']['style'] = array(); //filtered out for security (see kses security report)
// DL
$allowed_tags_student['dl'] = array();
// DT
@ -142,7 +142,7 @@ $allowed_tags_student['font'] = array();
$allowed_tags_student['font']['color'] = array();
$allowed_tags_student['font']['face'] = array();
$allowed_tags_student['font']['size'] = array();
$allowed_tags_student['font']['style'] = array();
//$allowed_tags_student['font']['style'] = array(); //filtered out for security (see kses security report)
// FORM
$allowed_tags_student['form'] = array();
$allowed_tags_student['form']['action'] = array();
@ -341,19 +341,19 @@ $allowed_tags_student['q']['cite'] = array();
$allowed_tags_student['s'] = array();
// SPAN
$allowed_tags_student['span'] = array();
$allowed_tags_student['span']['style'] = array();
#$allowed_tags_student['span']['style'] = array(); //filtered out for security (see kses security report)
// STRIKE
$allowed_tags_student['strike'] = array();
// STRONG
$allowed_tags_student['strong'] = array();
// STYLE
$allowed_tags_student['style'] = array();
$allowed_tags_student['style']['type'] = array();
$allowed_tags_student['style']['media'] = array();
// STYLE //filtered out for security (see kses security report)
#$allowed_tags_student['style'] = array();
#$allowed_tags_student['style']['type'] = array();
#$allowed_tags_student['style']['media'] = array();
$allowed_tags_student_full_page['style'] = array();
$allowed_tags_student_full_page['style']['type'] = array();
$allowed_tags_student_full_page['style']['media'] = array();
#$allowed_tags_student_full_page['style'] = array();
#$allowed_tags_student_full_page['style']['type'] = array();
#$allowed_tags_student_full_page['style']['media'] = array();
// SUB
$allowed_tags_student['sub'] = array();
// SUP

Write Preview
Loading…
Cancel
Save