瀏覽代碼

Don't clear class for audio/video when removing xss - refs BT#14026

Angel Fernando Quiroz Campos 7 年之前
父節點
當前提交
604950ff54
共有 1 個文件被更改,包括 2 次插入0 次删除
  1. 2 0
      main/inc/lib/formvalidator/Rule/allowed_tags.inc.php

+ 2 - 0
main/inc/lib/formvalidator/Rule/allowed_tags.inc.php

@@ -315,6 +315,7 @@ $allowed_tags_student['video']['preload'] = [];
 $allowed_tags_student['video']['src'] = [];
 $allowed_tags_student['video']['controls'] = [];
 $allowed_tags_student['video']['id'] = [];
+$allowed_tags_student['video']['class'] = [];
 
 $allowed_tags_student['audio'] = [];
 $allowed_tags_student['audio']['autoplay'] = [];
@@ -324,6 +325,7 @@ $allowed_tags_student['audio']['preload'] = [];
 $allowed_tags_student['audio']['controls'] = [];
 $allowed_tags_student['audio']['muted'] = [];
 $allowed_tags_student['audio']['id'] = [];
+$allowed_tags_student['audio']['class'] = [];
 
 $allowed_tags_student['source'] = [];
 $allowed_tags_student['source']['type'] = [];