瀏覽代碼

Task #2969 - Adding a comment.

Ivan Tcholakov 14 年之前
父節點
當前提交
8c7cfffa73
共有 1 個文件被更改,包括 5 次插入0 次删除
  1. 5 0
      main/inc/lib/kses-0.2.2/kses.php

+ 5 - 0
main/inc/lib/kses-0.2.2/kses.php

@@ -86,6 +86,11 @@ $kses_allowedentitynames = array(
  * $string. You have to remove any slashes from PHP's magic quotes before you
  * $string. You have to remove any slashes from PHP's magic quotes before you
  * call this function.
  * call this function.
  *
  *
+ * The default allowed protocols are 'http', 'https', 'ftp', 'news',
+ * 'nntp', 'telnet', 'gopher', 'mailto'.
+ * This covers all common link protocols, except for 'javascript' which should not
+ * be allowed for untrusted users.
+ *
  * @param string $string
  * @param string $string
  * @param string $allowed_html
  * @param string $allowed_html
  * @param array $allowed_protocols
  * @param array $allowed_protocols