diff options
author | Aleksander Machniak <alec@alec.pl> | 2014-02-13 14:19:41 +0100 |
---|---|---|
committer | Aleksander Machniak <alec@alec.pl> | 2014-02-13 14:19:41 +0100 |
commit | 5e8da2b5c9d69872d17c857e239b1e30e9c23976 (patch) | |
tree | 6eb39b96d0243d141a3bafc93ff3d3504414ad18 /program/lib/Roundcube/html.php | |
parent | 8bbb01cb66830cd20d3264d2ec78c911c48d270c (diff) |
Added toolbar button to move message in message view
Diffstat (limited to 'program/lib/Roundcube/html.php')
-rw-r--r-- | program/lib/Roundcube/html.php | 15 |
1 files changed, 12 insertions, 3 deletions
diff --git a/program/lib/Roundcube/html.php b/program/lib/Roundcube/html.php index 33517fbcd..64324dd8e 100644 --- a/program/lib/Roundcube/html.php +++ b/program/lib/Roundcube/html.php @@ -269,19 +269,28 @@ class html return ''; } - $allowed_f = array_flip((array)$allowed); + $allowed_f = array_flip((array)$allowed); $attrib_arr = array(); + foreach ($attrib as $key => $value) { // skip size if not numeric if ($key == 'size' && !is_numeric($value)) { continue; } - // ignore "internal" or not allowed attributes - if ($key == 'nl' || ($allowed && !isset($allowed_f[$key])) || $value === null) { + // ignore "internal" or empty attributes + if ($key == 'nl' || $value === null) { continue; } + // ignore not allowed attributes + if (!empty($allowed)) { + $is_data_attr = substr_compare($key, 'data-', 0, 5) === 0; + if (!isset($allowed_f[$key]) && (!$is_data_attr || !isset($allowed_f['data-*']))) { + continue; + } + } + // skip empty eventhandlers if (preg_match('/^on[a-z]+/', $key) && !$value) { continue; |