diff options
| author | friendica <info@friendica.com> | 2014-01-28 16:35:10 -0800 |
|---|---|---|
| committer | friendica <info@friendica.com> | 2014-01-28 16:35:10 -0800 |
| commit | 3dfd38021f193d16d3c6ed4824fa24e42a62238f (patch) | |
| tree | 5876d6e70e24dbfd29b142c770ef022fb1d083ef | |
| parent | d79a2e3b55c7cf6c775b8ecf7fbf708248aa16c8 (diff) | |
| download | volse-hubzilla-3dfd38021f193d16d3c6ed4824fa24e42a62238f.tar.gz volse-hubzilla-3dfd38021f193d16d3c6ed4824fa24e42a62238f.tar.bz2 volse-hubzilla-3dfd38021f193d16d3c6ed4824fa24e42a62238f.zip | |
SECURITY: remove style and class bbcodes
| -rw-r--r-- | include/bbcode.php | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/include/bbcode.php b/include/bbcode.php index 084c02125..fec8750e9 100644 --- a/include/bbcode.php +++ b/include/bbcode.php @@ -442,14 +442,6 @@ function bbcode($Text,$preserve_nl = false, $tryoembed = true) { // Check for list text $Text = str_replace("[*]", "<li>", $Text); - // Check for style sheet commands - if (strpos($Text,'[/style]') !== false) { - $Text = preg_replace("(\[style=(.*?)\](.*?)\[\/style\])ism","<span style=\"$1;\">$2</span>",$Text); - } - // Check for CSS classes - if (strpos($Text,'[/class]') !== false) { - $Text = preg_replace("(\[class=(.*?)\](.*?)\[\/class\])ism","<span class=\"$1\">$2</span>",$Text); - } // handle nested lists $endlessloop = 0; |