forked from extern/egroupware
disallow https-urls too
This commit is contained in:
parent
bf5389b02e
commit
e916dda8a6
@ -177,7 +177,7 @@ class HtmLawed
|
|||||||
$style = $style2buffer ?? '';
|
$style = $style2buffer ?? '';
|
||||||
// clean out comments and stuff
|
// clean out comments and stuff
|
||||||
$search = array(
|
$search = array(
|
||||||
'@url\(http:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
|
'@url\(https?:\/\/[^\)].*?\)@si', // url calls e.g. in style definitions
|
||||||
// '@<!--[\s\S]*?[ \t\n\r]*-->@', // Strip multi-line comments including CDATA
|
// '@<!--[\s\S]*?[ \t\n\r]*-->@', // Strip multi-line comments including CDATA
|
||||||
// '@<!--[\s\S]*?[ \t\n\r]*--@', // Strip broken multi-line comments including CDATA
|
// '@<!--[\s\S]*?[ \t\n\r]*--@', // Strip broken multi-line comments including CDATA
|
||||||
);
|
);
|
||||||
|
Loading…
Reference in New Issue
Block a user