voku /
anti-xss
| @@ 1209-1217 (lines=9) @@ | ||
| 1206 | ); |
|
| 1207 | } |
|
| 1208 | ||
| 1209 | if (\stripos($str, '<audio') !== false) { |
|
| 1210 | $str = (string) \preg_replace_callback( |
|
| 1211 | '#<audio[^\p{L}@]+([^>]*?)(?:\s?/?>|$)#iu', |
|
| 1212 | function ($matches) { |
|
| 1213 | return $this->_js_src_removal_callback($matches); |
|
| 1214 | }, |
|
| 1215 | $str |
|
| 1216 | ); |
|
| 1217 | } |
|
| 1218 | ||
| 1219 | if (\stripos($str, '<video') !== false) { |
|
| 1220 | $str = (string) \preg_replace_callback( |
|
| @@ 1219-1227 (lines=9) @@ | ||
| 1216 | ); |
|
| 1217 | } |
|
| 1218 | ||
| 1219 | if (\stripos($str, '<video') !== false) { |
|
| 1220 | $str = (string) \preg_replace_callback( |
|
| 1221 | '#<video[^\p{L}@]+([^>]*?)(?:\s?/?>|$)#iu', |
|
| 1222 | function ($matches) { |
|
| 1223 | return $this->_js_src_removal_callback($matches); |
|
| 1224 | }, |
|
| 1225 | $str |
|
| 1226 | ); |
|
| 1227 | } |
|
| 1228 | ||
| 1229 | if (\stripos($str, '<source') !== false) { |
|
| 1230 | $str = (string) \preg_replace_callback( |
|
| @@ 1229-1237 (lines=9) @@ | ||
| 1226 | ); |
|
| 1227 | } |
|
| 1228 | ||
| 1229 | if (\stripos($str, '<source') !== false) { |
|
| 1230 | $str = (string) \preg_replace_callback( |
|
| 1231 | '#<source[^\p{L}@]+([^>]*?)(?:\s?/?>|$)#iu', |
|
| 1232 | function ($matches) { |
|
| 1233 | return $this->_js_src_removal_callback($matches); |
|
| 1234 | }, |
|
| 1235 | $str |
|
| 1236 | ); |
|
| 1237 | } |
|
| 1238 | ||
| 1239 | if (\stripos($str, 'script') !== false) { |
|
| 1240 | // INFO: US-ASCII: ΒΌ === < |
|
