From 6dd130a1f34bc577d063f2856e8577f1f93337b8 Mon Sep 17 00:00:00 2001 From: Klaus Leithoff Date: Wed, 2 Apr 2008 08:47:42 +0000 Subject: [PATCH] fix for the problem, that allowed attribute values where stripped, due to the security bugfix --- phpgwapi/inc/class.kses.inc.php | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/phpgwapi/inc/class.kses.inc.php b/phpgwapi/inc/class.kses.inc.php index 43e44a7f4b..9e6d850e7f 100644 --- a/phpgwapi/inc/class.kses.inc.php +++ b/phpgwapi/inc/class.kses.inc.php @@ -517,6 +517,13 @@ if(isset($string2[1]) && !preg_match('%/\?%',$string2[0])) { return $this->_bad_protocol_once2($string2[0]).trim($string2[1]); + } else { + if (!isset($string2[1])) + { + return $string2[0]; + } else { + return ''; + } } return ''; } # function _bad_protocol_once @@ -676,4 +683,4 @@ return '0.0.2 (OOP fork of kses 0.2.1)'; } # function _version } -?> \ No newline at end of file +?>