forked from extern/egroupware
disallow https-urls too
This commit is contained in:
parent
bf5389b02e
commit
e916dda8a6
@ -177,7 +177,7 @@ class HtmLawed
|
||||
$style = $style2buffer ?? '';
|
||||
// clean out comments and stuff
|
||||
$search = array(
|
||||
'@url\(http:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
|
||||
'@url\(https?:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
|
||||
// '@<!--[\s\S]*?[ \t\n\r]*-->@', // Strip multi-line comments including CDATA
|
||||
// '@<!--[\s\S]*?[ \t\n\r]*--@', // Strip broken multi-line comments including CDATA
|
||||
);
|
||||
|
Loading…
Reference in New Issue
Block a user