sas Wed Sep 25 06:35:28 2002 EDT
Modified files:
/php4/ext/standard url_scanner_ex.re
Log:
Allow malformed HTML such as
<a onClick=window.open("/hardware/somevar.php?hinfoid=","chgti") ..>
where ["'] are part of the attribute value.
Index: php4/ext/standard/url_scanner_ex.re
diff -u php4/ext/standard/url_scanner_ex.re:1.59
php4/ext/standard/url_scanner_ex.re:1.60
--- php4/ext/standard/url_scanner_ex.re:1.59 Tue Aug 20 16:01:14 2002
+++ php4/ext/standard/url_scanner_ex.re Wed Sep 25 06:35:28 2002
@@ -299,7 +299,7 @@
/*!re2c
["] (any\[">])* ["] { handle_val(STD_ARGS, 1, '"'); goto state_next_arg_begin; }
['] (any\['>])* ['] { handle_val(STD_ARGS, 1, '\''); goto state_next_arg_begin; }
- (any\[ \n>"'])+ { handle_val(STD_ARGS, 0, '"'); goto
state_next_arg_begin; }
+ (any\[ \n>])+ { handle_val(STD_ARGS, 0, '\0'); goto
+state_next_arg_begin; }
any { passthru(STD_ARGS); goto
state_next_arg_begin; }
*/
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
