diff options
| author | Andreas Gohr <andi@splitbrain.org> | 2011-06-14 19:58:44 +0200 |
|---|---|---|
| committer | Andreas Gohr <andi@splitbrain.org> | 2011-06-14 20:44:58 +0200 |
| commit | 5a2f326fba4cd3f692b56807e5a169b54253fda9 (patch) | |
| tree | f7947867c28c9a06ab36c4ed38e3198c857c8c5f /inc/parser | |
| parent | b52b15965611fc865058c0331b55e4e9bccabd2e (diff) | |
| download | rpg-5a2f326fba4cd3f692b56807e5a169b54253fda9.tar.gz rpg-5a2f326fba4cd3f692b56807e5a169b54253fda9.tar.bz2 | |
Revert "Only allow known protocols in RSS links"
This reverts commit 1ca2719c7488662ebd7964c0d026e0890f923ee9 as it is
now superseeded by a6b82e436e3d68a42a6556165d6aaf9249db44cd
Diffstat (limited to 'inc/parser')
| -rw-r--r-- | inc/parser/xhtml.php | 10 |
1 files changed, 0 insertions, 10 deletions
diff --git a/inc/parser/xhtml.php b/inc/parser/xhtml.php index 22dc58963..83359cd55 100644 --- a/inc/parser/xhtml.php +++ b/inc/parser/xhtml.php @@ -40,8 +40,6 @@ class Doku_Renderer_xhtml extends Doku_Renderer { var $_counter = array(); // used as global counter, introduced for table classes var $_codeblock = 0; // counts the code and file blocks, used to provide download links - private $schemes = null; // protocol schemes - /** * Register a new edit section range * @@ -883,14 +881,6 @@ class Doku_Renderer_xhtml extends Doku_Renderer { // support feeds without links $lnkurl = $item->get_permalink(); if($lnkurl){ - // lnkurl might be an attack vector, only allow registered protocols - if(is_null($this->schemes)) $this->schemes = getSchemes(); - list($scheme) = explode('://',$lnkurl); - $scheme = strtolower($scheme); - if(!in_array($scheme,$this->schemes)) $lnkurl = ''; - } - - if($lnkurl){ // title is escaped by SimplePie, we unescape here because it // is escaped again in externallink() FS#1705 $this->externallink($item->get_permalink(), |