diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2013-11-03 11:40:17 +0100 |
|---|---|---|
| committer | Alexandre Alapetite <alexandre@alapetite.fr>
| 2013-11-03 11:40:17 +0100 |
| commit | 8f7d9e12a00b47b6727113ef3519468193aba017 (patch) | |
| tree | 0fe9e3ac300a91daa84b019f5b9be66577175907 /app/models/Feed.php | |
| parent | dd5273871a74d01d87fa1eaad7aa53bc1c148f85 (diff) | |
Filtrage des événements JavaScript
Corrige https://github.com/marienfressinaud/FreshRSS/issues/230
Diffstat (limited to 'app/models/Feed.php')
| -rw-r--r-- | app/models/Feed.php | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/app/models/Feed.php b/app/models/Feed.php index de5db3791..14eeb942a 100644 --- a/app/models/Feed.php +++ b/app/models/Feed.php @@ -198,6 +198,10 @@ class Feed extends Model { 'input', 'marquee', 'meta', 'noscript', 'param', 'script', 'style' )); + $feed->strip_attributes(array_merge($feed->strip_attributes, array( + 'onload', 'onunload', 'onclick', 'ondblclick', 'onmousedown', 'onmouseup', + 'onmouseover', 'onmousemove', 'onmouseout', 'onfocus', 'onblur', + 'onkeypress', 'onkeydown', 'onkeyup', 'onselect', 'onchange'))); $feed->init (); if ($feed->error ()) { |