Skip to content

Q
question2answer
Commit 188f5e98 by Guillaume Turri Committed by Guillaume Turri
Options

Prevent using <embed> and <object> tags 

we don't really need them, do we?
parent 7ed3f6a0
Showing with 1 additions and 1 deletions
qa-include/qa-base.php
...@@ -1024,7 +1024,7 @@ function qa_sanitize_html($html, $linksnewwindow = false, $storage = false) ...@@ -1024,7 +1024,7 @@ function qa_sanitize_html($html, $linksnewwindow = false, $storage = false)
$safe = htmLawed($html, array( $safe = htmLawed($html, array(
'safe' => 1, 'safe' => 1,
'elements' => '*+embed+object-form', 'elements' => '*-form',
'schemes' => 'href: aim, feed, file, ftp, gopher, http, https, irc, mailto, news, nntp, sftp, ssh, telnet; *:file, http, https; style: !; classid:clsid', 'schemes' => 'href: aim, feed, file, ftp, gopher, http, https, irc, mailto, news, nntp, sftp, ssh, telnet; *:file, http, https; style: !; classid:clsid',
'keep_bad' => 0, 'keep_bad' => 0,
'anti_link_spam' => array('/.*/', ''), 'anti_link_spam' => array('/.*/', ''),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment