Replace script stuff with xxx instead of space to avoid repeating sequences

diff --git a/lib/weblib.php b/lib/weblib.php
index 6ad0be91190582a69d87aa2be9ee6d55893a0b7e..07327bd6dbbfab8ca38875961e289e58a72caeca 100644 (file)
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -511,9 +511,9 @@ function clean_text($text, $format) {
         case FORMAT_HTML:
         case FORMAT_WIKI:
             $text = strip_tags($text, $ALLOWED_TAGS);
-            $text = str_ireplace("javascript:", " ", $text);           // Remove javascript: label
-            $text = eregi_replace("([^a-z])language([[:space:]]*)=", " ", $text);    // Remove javascript/VBScript
-            $text = eregi_replace("([^a-z])on([a-z]+)([[:space:]]*)=", " ", $text);  // Remove script events
+            $text = str_ireplace("javascript:", "xxx", $text);           // Remove javascript: label
+            $text = eregi_replace("([^a-z])language([[:space:]]*)=", "xxx", $text);    // Remove javascript/VBScript
+            $text = eregi_replace("([^a-z])on([a-z]+)([[:space:]]*)=", "xxx", $text);  // Remove script events
             return $text;
 
         case FORMAT_PLAIN: