summaryrefslogtreecommitdiff
path: root/modules/node/node.module
diff options
context:
space:
mode:
authorDries Buytaert <dries@buytaert.net>2003-06-27 17:48:20 +0000
committerDries Buytaert <dries@buytaert.net>2003-06-27 17:48:20 +0000
commitf4df719502527597f6340be8016fd4b649cc1967 (patch)
treece9ece43874885689942c5288fb7e1927c02e620 /modules/node/node.module
parent2323e5723395dd9c793b301650b69bdd0a37e273 (diff)
downloadbrdo-f4df719502527597f6340be8016fd4b649cc1967.tar.gz
brdo-f4df719502527597f6340be8016fd4b649cc1967.tar.bz2
- Reworked the CXX checking; now, _any_ user input will be checked
and the request will be terminated when something suspicious is detected. This will be logged in the watchdog. With help from Marco. - Fixed translation issue in the archive module. Patch by Gerhard. - Removed dead parameter from variable_get(). Patch by Chris Johnson. Fixes bug #2111. - Improved input checking of taxonomy module. Patch by Gerhard. Fixes bug #2112.
Diffstat (limited to 'modules/node/node.module')
-rw-r--r--modules/node/node.module5
1 files changed, 0 insertions, 5 deletions
diff --git a/modules/node/node.module b/modules/node/node.module
index aad95c00f..ccdd264ba 100644
--- a/modules/node/node.module
+++ b/modules/node/node.module
@@ -499,11 +499,6 @@ function node_comment_mode($nid) {
}
function node_filter($text) {
- $text = preg_replace("/\Wstyle\s*=[^>]+?>/i", ">", $text);
- $text = preg_replace("/\Won[a-z]+\s*=[^>]+?>/i", ">", $text);
- $text = preg_replace("/\Wsrc\s*=[\s'\"]*javascript[^>]+?>/i", ">", $text);
- $text = preg_replace("/\Whref\s*=[\s'\"]*javascript:[^>]+?>/i", ">", $text);
-
if (variable_get("filter_html", 0)) {
$text = node_filter_html($text);
}