forked from extern/egroupware
disallow https-urls too
This commit is contained in:
parent
38089439da
commit
9e54c4f4a3
@ -164,7 +164,7 @@ class HtmLawed
|
||||
$style = $style2buffer ?? '';
|
||||
// clean out comments and stuff
|
||||
$search = array(
|
||||
'@url\(http:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
|
||||
'@url\(https?:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
|
||||
// '@<!--[\s\S]*?[ \t\n\r]*-->@', // Strip multi-line comments including CDATA
|
||||
// '@<!--[\s\S]*?[ \t\n\r]*--@', // Strip broken multi-line comments including CDATA
|
||||
);
|
||||
|
Loading…
Reference in New Issue
Block a user