@@ 474-485 (lines=12) @@ | ||
471 | * @param array |
|
472 | * @return string |
|
473 | */ |
|
474 | protected function _js_link_removal($match) |
|
475 | { |
|
476 | return str_replace( |
|
477 | $match[1], |
|
478 | preg_replace( |
|
479 | '#href=.*?(alert\(|alert&\#40;|javascript\:|livescript\:|mocha\:|charset\=|window\.|document\.|\.cookie|<script|<xss|data\s*:)#si', |
|
480 | '', |
|
481 | $this->_filter_attributes(str_replace(array('<', '>'), '', $match[1])) |
|
482 | ), |
|
483 | $match[0] |
|
484 | ); |
|
485 | } |
|
486 | ||
487 | // -------------------------------------------------------------------- |
|
488 | ||
@@ 500-511 (lines=12) @@ | ||
497 | * @param array |
|
498 | * @return string |
|
499 | */ |
|
500 | protected function _js_img_removal($match) |
|
501 | { |
|
502 | return str_replace( |
|
503 | $match[1], |
|
504 | preg_replace( |
|
505 | '#src=.*?(alert\(|alert&\#40;|javascript\:|livescript\:|mocha\:|charset\=|window\.|document\.|\.cookie|<script|<xss|base64\s*,)#si', |
|
506 | '', |
|
507 | $this->_filter_attributes(str_replace(array('<', '>'), '', $match[1])) |
|
508 | ), |
|
509 | $match[0] |
|
510 | ); |
|
511 | } |
|
512 | ||
513 | // -------------------------------------------------------------------- |
|
514 |