diff options
author | Aleksander Machniak <alec@alec.pl> | 2014-06-05 15:54:45 +0200 |
---|---|---|
committer | Aleksander Machniak <alec@alec.pl> | 2014-06-05 15:54:45 +0200 |
commit | 778d2363f1a0cb5b6bebae1864de76d1c31669d8 (patch) | |
tree | 3a8178d95669cde47410821d6f4776b0ab45dd82 /program | |
parent | 64f7d6758fd269823ab19270a6ef5658f0a28669 (diff) | |
parent | 8bd59c332782eea8b3de4ca5c22942e62100140f (diff) |
Merge branch 'master' of github.com:roundcube/roundcubemail
Diffstat (limited to 'program')
-rw-r--r-- | program/lib/Roundcube/html.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/program/lib/Roundcube/html.php b/program/lib/Roundcube/html.php index 0209d1bf2..3aae7cfe7 100644 --- a/program/lib/Roundcube/html.php +++ b/program/lib/Roundcube/html.php @@ -283,11 +283,11 @@ class html continue; } - // ignore not allowed attributes, except data-* + // ignore not allowed attributes, except aria-* and data-* if (!empty($allowed)) { $is_data_attr = @substr_compare($key, 'data-', 0, 5) === 0; $is_aria_attr = @substr_compare($key, 'aria-', 0, 5) === 0; - if (!$is_aria_attr && !isset($allowed_f[$key]) && (!$is_data_attr || !isset($allowed_f['data-*']))) { + if (!$is_aria_attr && !$is_data_attr && !isset($allowed_f[$key])) { continue; } } |