[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squirrelmail-cvs
Subject:    [SM-CVS] CVS: squirrelmail/functions mime.php,1.189.2.19,1.189.2.20
From:       Konstantin Riabitsev <graf25 () users ! sourceforge ! net>
Date:       2003-04-24 2:27:55
[Download RAW message or body]

Update of /cvsroot/squirrelmail/squirrelmail/functions
In directory sc8-pr-cvs1:/tmp/cvs-serv29098

Modified Files:
      Tag: SM-1_2-STABLE
	mime.php 
Log Message:
Added lowsrc to the list of attributes to be removed. Also
removing redundant /s switches.


Index: mime.php
===================================================================
RCS file: /cvsroot/squirrelmail/squirrelmail/functions/mime.php,v
retrieving revision 1.189.2.19
retrieving revision 1.189.2.20
diff -u -w -r1.189.2.19 -r1.189.2.20
--- mime.php	10 Mar 2003 22:26:21 -0000	1.189.2.19
+++ mime.php	24 Apr 2003 02:27:52 -0000	1.189.2.20
@@ -1995,10 +1995,11 @@
     $rm_attnames = Array(
                          "/.*/" =>
                          Array(
-                               "/target/si",
-                               "/^on.*/si",
-                               "/^dynsrc/si",
-                               "/^data.*/si"
+                               "/target/i",
+                               "/^on.*/i",
+                               "/^dynsrc/i",
+                               "/^data.*/i",
+                               "/^lowsrc/i"
                                )
                          );
 
@@ -2009,10 +2010,10 @@
                 "/^src|background/i" =>
                     Array(
                           Array(
-                                "|^([\'\"])\s*\.\./.*([\'\"])|si",
-                                "/^([\'\"])\s*\S+\s*script\s*:.*([\'\"])/si",
-                                "/^([\'\"])\s*mocha\s*:*.*([\'\"])/si",
-                                "/^([\'\"])\s*about\s*:.*([\'\"])/si"
+                                "|^([\'\"])\s*\.\./.*([\'\"])|i",
+                                "/^([\'\"])\s*\S+\s*script\s*:.*([\'\"])/i",
+                                "/^([\'\"])\s*mocha\s*:*.*([\'\"])/i",
+                                "/^([\'\"])\s*about\s*:.*([\'\"])/i"
                                 ),
                           Array(
                                 "\\1$secremoveimg\\2",
@@ -2024,10 +2025,10 @@
                 "/^href|action/i" =>
                     Array(
                           Array(
-                                "|^([\'\"])\s*\.\./.*([\'\"])|si",
-                                "/^([\'\"])\s*\S+\s*script\s*:.*([\'\"])/si",
-                                "/^([\'\"])\s*mocha\s*:*.*([\'\"])/si",
-                                "/^([\'\"])\s*about\s*:.*([\'\"])/si"
+                                "|^([\'\"])\s*\.\./.*([\'\"])|i",
+                                "/^([\'\"])\s*\S+\s*script\s*:.*([\'\"])/i",
+                                "/^([\'\"])\s*mocha\s*:*.*([\'\"])/i",
+                                "/^([\'\"])\s*about\s*:.*([\'\"])/i"
                                 ),
                           Array(
                                 "\\1#\\2",
@@ -2039,13 +2040,13 @@
                 "/^style/si" =>
                     Array(
                           Array(
-                                "/expression/si",
-                                "/binding/si",
-                                "/behaviou*r/si",
-                                "|url\(([\'\"])\s*\.\./.*([\'\"])\)|si",
-                                "/url\(([\'\"])\s*\S+\s*script\s*:.*([\'\"])\)/si",
-                                "/url\(([\'\"])\s*mocha\s*:.*([\'\"])\)/si",
-                                "/url\(([\'\"])\s*about\s*:.*([\'\"])\)/si"
+                                "/expression/i",
+                                "/binding/i",
+                                "/behaviou*r/i",
+                                "|url\(([\'\"])\s*\.\./.*([\'\"])\)|i",
+                                "/url\(([\'\"])\s*\S+\s*script\s*:.*([\'\"])\)/i",
+                                "/url\(([\'\"])\s*mocha\s*:.*([\'\"])\)/i",
+                                "/url\(([\'\"])\s*about\s*:.*([\'\"])\)/i"
                                ),
                           Array(
                                 "idiocy",
@@ -2065,12 +2066,12 @@
          * to false.
          */
          array_push($bad_attvals{'/.*/'}{'/^src|background/i'}[0],
-                    '/^([\'\"])\s*https*:.*([\'\"])/si');
+                    '/^([\'\"])\s*https*:.*([\'\"])/i');
          array_push($bad_attvals{'/.*/'}{'/^src|background/i'}[1],
                     "\\1$secremoveimg\\2");
-         array_push($bad_attvals{'/.*/'}{'/^style/si'}[0],
+         array_push($bad_attvals{'/.*/'}{'/^style/i'}[0],
                     '/url\(([\'\"])\s*https*:.*([\'\"])\)/si');
-         array_push($bad_attvals{'/.*/'}{'/^style/si'}[1],
+         array_push($bad_attvals{'/.*/'}{'/^style/i'}[1],
                     "url(\\1$secremoveimg\\2)");
     }
 



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
--
squirrelmail-cvs mailing list
List Address: squirrelmail-cvs@lists.sourceforge.net
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-cvs
http://squirrelmail.org/cvs
[prev in list] [next in list] [prev in thread] [next in thread]