disallow https-urls too

This commit is contained in:
ralf 2022-09-12 12:50:31 +02:00
parent 38089439da
commit 9e54c4f4a3

View File

@ -164,7 +164,7 @@ class HtmLawed
$style = $style2buffer ?? '';
// clean out comments and stuff
$search = array(
'@url\(http:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
'@url\(https?:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
// '@<!--[\s\S]*?[ \t\n\r]*-->@', // Strip multi-line comments including CDATA
// '@<!--[\s\S]*?[ \t\n\r]*--@', // Strip broken multi-line comments including CDATA
);