diff options
| author | Andrew Dolgov <[email protected]> | 2012-10-30 16:34:17 +0400 |
|---|---|---|
| committer | Andrew Dolgov <[email protected]> | 2012-10-30 16:34:17 +0400 |
| commit | 3795b730340bc3c34c054e3d41fe9e33e4a3dc96 (patch) | |
| tree | 95f1d090d3e1a69187c7484bdc5270d1113cf746 /include | |
| parent | 120c2b016fcdd018c08341bf269483dc3a453fd0 (diff) | |
htmLawed: tweak allowed attributes
Diffstat (limited to 'include')
| -rw-r--r-- | include/functions.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/functions.php b/include/functions.php index 01ec33187..35fcbc45a 100644 --- a/include/functions.php +++ b/include/functions.php @@ -2593,7 +2593,7 @@ $res = trim($str); if (!$res) return ''; - $config = array('safe' => 1, 'deny_attribute' => 'style', 'comment' => 1, 'cdata' => 1); + $config = array('safe' => 1, 'deny_attribute' => 'style, width, height', 'comment' => 1, 'cdata' => 1); $res = htmLawed($res, $config); if (get_pref($link, "STRIP_IMAGES", $owner)) { |