Less strict purging of 'about:' in URLs.
Patch by kareila.
diffs (12 lines):
diff -r 7e425798f29e -r 19ef549e1702 cgi-bin/LJ/CleanHTML.pm
--- a/cgi-bin/LJ/CleanHTML.pm Tue Oct 20 17:27:18 2009 +0000
+++ b/cgi-bin/LJ/CleanHTML.pm Tue Oct 20 23:59:55 2009 +0000
@@ -588,7 +588,7 @@ sub clean
# IE sucks:
my $nowhite = $hash->{$attr};
$nowhite =~ s/[\s\x0b]+//g;
- if ($nowhite =~
/(?:jscript|livescript|javascript|vbscript|about|data):/ix) {
+ if ($nowhite =~
/(?:jscript|livescript|javascript|vbscript|^about|data):/ix) {
delete $hash->{$attr};
next;
}
_______________________________________________
dw-changelog mailing list
[email protected]
http://lists.dwscoalition.org/mailman/listinfo/dw-changelog
