Skip to content
Snippets Groups Projects
Commit 55ed4e14 authored by Prasad's avatar Prasad
Browse files

Fixes #923: Improved purification api

parent 5eabddab
No related branches found
No related tags found
No related merge requests found
......@@ -718,7 +718,7 @@ function purifyHtmlEventAttributes($value){
"onclick|ondblclick|ondrag|ondragend|ondragenter|ondragleave|ondragover|".
"ondragstart|ondrop|onmousedown|onmousemove|onmouseout|onmouseover|".
"onmouseup|onmousewheel|onscroll|onwheel|oncopy|oncut|onpaste";
if(preg_match("/\s(".$htmlEventAttributes.")\s*=/i", $value)) {
if(preg_match("/\s*(".$htmlEventAttributes.")\s*=/i", $value)) {
$value = str_replace("=", "=", $value);
}
return $value;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment