summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDries Buytaert2003-06-29 18:21:47 +0000
committerDries Buytaert2003-06-29 18:21:47 +0000
commitda80e6204252b78c3cbe380df54c056df438a1d0 (patch)
tree47638b2b2c0ec57e083e0d31675380f687336b8a
parent4d29898a9638a30451e6fb53c1429bfa4ed43ee7 (diff)
- Removed "link" from the XSS check as well as "font".
-rw-r--r--includes/common.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/includes/common.inc b/includes/common.inc
index 4b7fb4e..a602653 100644
--- a/includes/common.inc
+++ b/includes/common.inc
@@ -490,7 +490,7 @@ function xss_check_input_data($data) {
$match += preg_match("/\W(src|href)\s*=[\s'\"]*javascript[^>]+?>/i", $data);
// check tags:
- $match += preg_match("/<\s*(applet|script|object|style|embed|form|blink|meta|font|html|link|frame|iframe|layer|ilayer|head|frameset|xml)/i", $data);
+ $match += preg_match("/<\s*(applet|script|object|style|embed|form|blink|meta|html|frame|iframe|layer|ilayer|head|frameset|xml)/i", $data);
if ($match) {
watchdog("warning", "terminated request because of suspicious input data: ". drupal_specialchars($data));