diff options
| author | Aleksander Machniak <alec@alec.pl> | 2014-05-08 15:08:45 +0200 |
|---|---|---|
| committer | Aleksander Machniak <alec@alec.pl> | 2014-05-08 15:08:45 +0200 |
| commit | 7079110c61d41020912baab91cef8b3a3acdb577 (patch) | |
| tree | d23d414bc9b90ec1723cde585b042bb951744463 /program/lib/Roundcube/html.php | |
| parent | 48e92fcbbabfce7ee9ff141c576954ae940e8f0d (diff) | |
Allow data-* attributes (#1489860)
Diffstat (limited to 'program/lib/Roundcube/html.php')
| -rw-r--r-- | program/lib/Roundcube/html.php | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/program/lib/Roundcube/html.php b/program/lib/Roundcube/html.php index f47ef299a..a88570d75 100644 --- a/program/lib/Roundcube/html.php +++ b/program/lib/Roundcube/html.php @@ -283,10 +283,9 @@ class html continue; } - // ignore not allowed attributes + // ignore not allowed attributes, except data-* if (!empty($allowed)) { - $is_data_attr = @substr_compare($key, 'data-', 0, 5) === 0; - if (!isset($allowed_f[$key]) && (!$is_data_attr || !isset($allowed_f['data-*']))) { + if (!isset($allowed_f[$key]) && @substr_compare($key, 'data-', 0, 5) !== 0) { continue; } } |