Changeset 6747

Timestamp:

09/29/08 18:20:08 (3 months ago)

Author:

daybreaker

Message:

#1107:

• 자바스크립트 필터링 함수 강화
  
• 설치 기본값으로 RSS 리더기 자바스크립트 필터링 적용
  

Location:

trunk

Files:

• library/function/javascript.php (modified) (1 diff)
• setup.php (modified) (1 diff)

trunk/library/function/javascript.php

@@ -29 +29 @@
             $str = str_replace($tag, $strippedTag, $str);
         }
-        $str = preg_replace('/&#x0*([9ad]);?/ie', "chr(hexdec('\\1'))", $str);
+        $str = preg_replace('/&#x0*([0-9ad]{1,2});?/ie', "chr(hexdec('\\1'))", $str);
         $patterns = array(
             '/<\/?iframe.*?>/si',
             '/<script.*?<\/script>/si',
             '/<object.*?type=["\']?text\/x-scriptlet["\']?.*?>(.*?<\/object>)?/si',
-            '/j\s*?a\s*?v\s*?a\s*?s\s*?c\s*?r\s*?i\s*?p\s*?t\s*?:/si'
+            '/j\s*?a\s*?v\s*?a\s*?s\s*?c\s*?r\s*?i\s*?p\s*?t\s*?:/si',
+            '/<link.*?>/si'
         );
         $str = preg_replace($patterns, '', $str);

trunk/setup.php

@@ -1286 +1286 @@
   feedLife int(11) NOT NULL default '30',
   loadImage int(11) NOT NULL default '1',
-  allowScript int(11) NOT NULL default '1',
+  allowScript int(11) NOT NULL default '0',
   newWindow int(11) NOT NULL default '1',
   PRIMARY KEY  (blogid)