xpressengine /
xe-core
| @@ 548-579 (lines=32) @@ | ||
| 545 | return FALSE; |
|
| 546 | } |
|
| 547 | ||
| 548 | function _checkAllowScriptAccess($m) |
|
| 549 | { |
|
| 550 | if($m[1] == 'object') |
|
| 551 | { |
|
| 552 | $this->allowscriptaccessList[] = 1; |
|
| 553 | } |
|
| 554 | ||
| 555 | if($m[1] == 'param') |
|
| 556 | { |
|
| 557 | if(stripos($m[0], 'allowscriptaccess')) |
|
| 558 | { |
|
| 559 | $m[0] = '<param name="allowscriptaccess" value="never"'; |
|
| 560 | if(substr($m[0], -1) == '/') |
|
| 561 | { |
|
| 562 | $m[0] .= '/'; |
|
| 563 | } |
|
| 564 | $this->allowscriptaccessList[count($this->allowscriptaccessList) - 1]--; |
|
| 565 | } |
|
| 566 | } |
|
| 567 | else if($m[1] == 'embed') |
|
| 568 | { |
|
| 569 | if(stripos($m[0], 'allowscriptaccess')) |
|
| 570 | { |
|
| 571 | $m[0] = preg_replace('/always|samedomain/i', 'never', $m[0]); |
|
| 572 | } |
|
| 573 | else |
|
| 574 | { |
|
| 575 | $m[0] = preg_replace('/\<embed/i', '<embed allowscriptaccess="never"', $m[0]); |
|
| 576 | } |
|
| 577 | } |
|
| 578 | return $m[0]; |
|
| 579 | } |
|
| 580 | ||
| 581 | function _addAllowScriptAccess($m) |
|
| 582 | { |
|
| @@ 429-460 (lines=32) @@ | ||
| 426 | return $m[0]; |
|
| 427 | } |
|
| 428 | ||
| 429 | function _checkAllowScriptAccess($m) |
|
| 430 | { |
|
| 431 | if($m[1] == 'object') |
|
| 432 | { |
|
| 433 | $this->allowscriptaccessList[] = 1; |
|
| 434 | } |
|
| 435 | ||
| 436 | if($m[1] == 'param') |
|
| 437 | { |
|
| 438 | if(stripos($m[0], 'allowscriptaccess')) |
|
| 439 | { |
|
| 440 | $m[0] = '<param name="allowscriptaccess" value="never"'; |
|
| 441 | if(substr($m[0], -1) == '/') |
|
| 442 | { |
|
| 443 | $m[0] .= '/'; |
|
| 444 | } |
|
| 445 | $this->allowscriptaccessList[count($this->allowscriptaccessList)-1]--; |
|
| 446 | } |
|
| 447 | } |
|
| 448 | else if($m[1] == 'embed') |
|
| 449 | { |
|
| 450 | if(stripos($m[0], 'allowscriptaccess')) |
|
| 451 | { |
|
| 452 | $m[0] = preg_replace('/always|samedomain/i', 'never', $m[0]); |
|
| 453 | } |
|
| 454 | else |
|
| 455 | { |
|
| 456 | $m[0] = preg_replace('/\<embed/i', '<embed allowscriptaccess="never"', $m[0]); |
|
| 457 | } |
|
| 458 | } |
|
| 459 | return $m[0]; |
|
| 460 | } |
|
| 461 | ||
| 462 | function getContent($add_popup_menu = true, $add_content_info = true, $resource_realpath = false, $add_xe_content_class = true, $stripEmbedTagException = false) |
|
| 463 | { |
|
