From d1e99b05cc4af4e3552f7a81b340e1610d3bf1be Mon Sep 17 00:00:00 2001 From: garvinhicking Date: Thu, 21 Apr 2005 08:21:42 +0000 Subject: [PATCH] allow ~ and ! in URL characters --- docs/NEWS | 2 ++ plugins/serendipity_event_bbcode/serendipity_event_bbcode.php | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/NEWS b/docs/NEWS index 4bb1dee..18f7d3c 100644 --- a/docs/NEWS +++ b/docs/NEWS @@ -3,6 +3,8 @@ Version 0.9 () ------------------------------------------------------------------------ + * BBCode plugin: Allow ~ and ! URL characters (garvinhicking) + * Made serendipity_event_blogpdf an external plugin (nohn) * Added romanian translation by Alexandru Szasz diff --git a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php index b5ad639..ebebf19 100644 --- a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php +++ b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php @@ -74,7 +74,7 @@ class serendipity_event_bbcode extends serendipity_event $pattern_mail = '([\.\-\+~@_0-9a-z]+?)'; // Only allow strings occuring in URLs: &;?:.-_@/, 0-9, a-z - $pattern_url = '([@\?:&;0-9a-z#\.\-_\/]+?)'; + $pattern_url = '([@!~\?:&;0-9a-z#\.\-_\/]+?)'; // Disallow possibly evil HTML characters which may lead to Javascript XSS: '"(); $pattern_query = '([^"\'\(\);]+?)'; -- 2.39.5