From: garvinhicking Date: Mon, 25 Apr 2005 09:55:16 +0000 (+0000) Subject: allow "=" in urls. :-( X-Git-Tag: 0.8.1~30^2~1 X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=c7af92e7d627897a459a513697f58599eb458ddd;p=s9y.git allow "=" in urls. :-( --- diff --git a/docs/NEWS b/docs/NEWS index 9d116e9..abc8686 100644 --- a/docs/NEWS +++ b/docs/NEWS @@ -18,7 +18,7 @@ Version 0.9 () * Adjusted checking for "convert" binary in installation for Windows servers. Thanks to BobRock! (garvinhicking) - * BBCode plugin: Allow ~ and ! URL characters (garvinhicking) + * BBCode plugin: Allow =, ~ and ! URL characters (garvinhicking) * Made serendipity_event_blogpdf an external plugin (nohn) diff --git a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php index ebebf19..f909ea1 100644 --- a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php +++ b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php @@ -74,7 +74,7 @@ class serendipity_event_bbcode extends serendipity_event $pattern_mail = '([\.\-\+~@_0-9a-z]+?)'; // Only allow strings occuring in URLs: &;?:.-_@/, 0-9, a-z - $pattern_url = '([@!~\?:&;0-9a-z#\.\-_\/]+?)'; + $pattern_url = '([@!=~\?:&;0-9a-z#\.\-_\/]+?)'; // Disallow possibly evil HTML characters which may lead to Javascript XSS: '"(); $pattern_query = '([^"\'\(\);]+?)';