diff options
| author | Thomas Bruederli <thomas@roundcube.net> | 2013-01-25 17:57:09 +0100 |
|---|---|---|
| committer | Thomas Bruederli <thomas@roundcube.net> | 2013-01-25 17:57:09 +0100 |
| commit | f7c50e28dbd637b3b60c6aea0fac3768f8f59f05 (patch) | |
| tree | df0e68dc3d7f6df13473b5f5a717805af0c04c92 /program/lib/washtml.php | |
| parent | 39f883e1f9fab83a47b76fb4802c2d01fa9c4e76 (diff) | |
| parent | 00a6b75622fb49dfe84173b04f8353fbc4216c9c (diff) | |
Merge branch 'release-0.8' of github.com:roundcube/roundcubemail into release-0.8
Diffstat (limited to 'program/lib/washtml.php')
| -rw-r--r-- | program/lib/washtml.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/program/lib/washtml.php b/program/lib/washtml.php index 0d4ffdb4b..d13d66404 100644 --- a/program/lib/washtml.php +++ b/program/lib/washtml.php @@ -214,7 +214,7 @@ class washtml $key = strtolower($key); $value = $node->getAttribute($key); if (isset($this->_html_attribs[$key]) || - ($key == 'href' && !preg_match('!^javascript!i', $value) + ($key == 'href' && !preg_match('!^(javascript|vbscript|data:text)!i', $value) && preg_match('!^([a-z][a-z0-9.+-]+:|//|#).+!i', $value)) ) { $t .= ' ' . $key . '="' . htmlspecialchars($value, ENT_QUOTES) . '"'; |