Skip to content

Q
question2answer
Unverified Commit 04e83ebf by Scott Committed by GitHub
Options

Merge pull request #807 from gturri/bugfix 

Prevent using <embed> and <object> tags
parents 7ed3f6a0 188f5e98
Showing with 1 additions and 1 deletions
qa-include/qa-base.php
......@@ -1024,7 +1024,7 @@ function qa_sanitize_html($html, $linksnewwindow = false, $storage = false)
$safe = htmLawed($html, array(
'safe' => 1,
'elements' => '*+embed+object-form',
'elements' => '*-form',
'schemes' => 'href: aim, feed, file, ftp, gopher, http, https, irc, mailto, news, nntp, sftp, ssh, telnet; *:file, http, https; style: !; classid:clsid',
'keep_bad' => 0,
'anti_link_spam' => array('/.*/', ''),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment