Browse Source

Don't clear class for audio/video when removing xss - refs BT#14026

Angel Fernando Quiroz Campos 7 years ago
parent
commit
604950ff54
1 changed files with 2 additions and 0 deletions
  1. 2 0
      main/inc/lib/formvalidator/Rule/allowed_tags.inc.php

+ 2 - 0
main/inc/lib/formvalidator/Rule/allowed_tags.inc.php

@@ -315,6 +315,7 @@ $allowed_tags_student['video']['preload'] = [];
 $allowed_tags_student['video']['src'] = [];
 $allowed_tags_student['video']['controls'] = [];
 $allowed_tags_student['video']['id'] = [];
+$allowed_tags_student['video']['class'] = [];
 
 $allowed_tags_student['audio'] = [];
 $allowed_tags_student['audio']['autoplay'] = [];
@@ -324,6 +325,7 @@ $allowed_tags_student['audio']['preload'] = [];
 $allowed_tags_student['audio']['controls'] = [];
 $allowed_tags_student['audio']['muted'] = [];
 $allowed_tags_student['audio']['id'] = [];
+$allowed_tags_student['audio']['class'] = [];
 
 $allowed_tags_student['source'] = [];
 $allowed_tags_student['source']['type'] = [];