disallow https-urls too

This commit is contained in:
ralf 2022-09-12 12:50:31 +02:00
parent bf5389b02e
commit e916dda8a6

View File

@ -177,7 +177,7 @@ class HtmLawed
$style = $style2buffer ?? '';
// clean out comments and stuff
$search = array(
'@url\(http:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
'@url\(https?:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
// '@<!--[\s\S]*?[ \t\n\r]*-->@', // Strip multi-line comments including CDATA
// '@<!--[\s\S]*?[ \t\n\r]*--@', // Strip broken multi-line comments including CDATA
);