From 4953809a56d314c8c3ed11cfb2cfa355006152cf Mon Sep 17 00:00:00 2001 From: garvinhicking Date: Sat, 29 Apr 2006 15:39:42 +0000 Subject: [PATCH] also allow "+" in bbcode urls, thanks to leif from the forums --- plugins/serendipity_event_bbcode/serendipity_event_bbcode.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php index ded4d9f..c8a7cf9 100644 --- a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php +++ b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php @@ -149,7 +149,7 @@ class serendipity_event_bbcode extends serendipity_event static $pattern_mail = '([\.\-\+~@_0-9a-z]+?)'; // Only allow strings occuring in URLs: &;?:.-_@/, 0-9, a-z - static $pattern_url = '([@!=~\?:&;0-9a-z#\.\-_\/,%]+?)'; + static $pattern_url = '([@!=~\?:&;0-9a-z#\.\-_\/,%\+]+?)'; // Disallow possibly evil HTML characters which may lead to Javascript XSS: '"(); static $pattern_query = '([^"\'\(\);]+?)'; -- 2.39.5