xpressengine /
xe-core
| @@ 1398-1401 (lines=4) @@ | ||
| 1395 | { |
|
| 1396 | $result[$k] = !preg_match('/^[0-9,]+$/', $v) ? (int) $v : $v; |
|
| 1397 | } |
|
| 1398 | elseif($key === 'mid' || $key === 'search_keyword') |
|
| 1399 | { |
|
| 1400 | $result[$k] = htmlspecialchars($v, ENT_COMPAT | ENT_HTML401, 'UTF-8', FALSE); |
|
| 1401 | } |
|
| 1402 | elseif($key === 'vid') |
|
| 1403 | { |
|
| 1404 | $result[$k] = urlencode($v); |
|
| @@ 1406-1409 (lines=4) @@ | ||
| 1403 | { |
|
| 1404 | $result[$k] = urlencode($v); |
|
| 1405 | } |
|
| 1406 | elseif($key === 'xe_validator_id') |
|
| 1407 | { |
|
| 1408 | $result[$k] = htmlspecialchars($v, ENT_COMPAT | ENT_HTML401, 'UTF-8', FALSE); |
|
| 1409 | } |
|
| 1410 | elseif(stripos($key, 'XE_VALIDATOR', 0) === 0) |
|
| 1411 | { |
|
| 1412 | unset($result[$k]); |
|
| @@ 442-445 (lines=4) @@ | ||
| 439 | } |
|
| 440 | } |
|
| 441 | ||
| 442 | if(!$isWhiteDomain) |
|
| 443 | { |
|
| 444 | $content = str_replace($iframeTag, htmlspecialchars($iframeTag, ENT_COMPAT | ENT_HTML401, 'UTF-8', false), $content); |
|
| 445 | } |
|
| 446 | } |
|
| 447 | } |
|
| 448 | } |
|
| @@ 477-480 (lines=4) @@ | ||
| 474 | $ext = strtolower(substr(strrchr($parser->iNodeAttributes['value'], "."), 1)); |
|
| 475 | $isWhiteDomain = $this->isWhiteDomain($parser->iNodeAttributes['value']); |
|
| 476 | ||
| 477 | if(!$isWhiteDomain) |
|
| 478 | { |
|
| 479 | $content = str_replace($paramTag, htmlspecialchars($paramTag, ENT_COMPAT | ENT_HTML401, 'UTF-8', false), $content); |
|
| 480 | } |
|
| 481 | } |
|
| 482 | } |
|
| 483 | } |
|
