xpressengine /
xe-core
| @@ 548-579 (lines=32) @@ | ||
| 545 | return FALSE; |
|
| 546 | } |
|
| 547 | ||
| 548 | function _checkAllowScriptAccess($m) |
|
| 549 | { |
|
| 550 | if($m[1] == 'object') |
|
| 551 | { |
|
| 552 | $this->allowscriptaccessList[] = 1; |
|
| 553 | } |
|
| 554 | ||
| 555 | if($m[1] == 'param') |
|
| 556 | { |
|
| 557 | if(stripos($m[0], 'allowscriptaccess')) |
|
| 558 | { |
|
| 559 | $m[0] = '<param name="allowscriptaccess" value="never"'; |
|
| 560 | if(substr($m[0], -1) == '/') |
|
| 561 | { |
|
| 562 | $m[0] .= '/'; |
|
| 563 | } |
|
| 564 | $this->allowscriptaccessList[count($this->allowscriptaccessList) - 1]--; |
|
| 565 | } |
|
| 566 | } |
|
| 567 | else if($m[1] == 'embed') |
|
| 568 | { |
|
| 569 | if(stripos($m[0], 'allowscriptaccess')) |
|
| 570 | { |
|
| 571 | $m[0] = preg_replace('/always|samedomain/i', 'never', $m[0]); |
|
| 572 | } |
|
| 573 | else |
|
| 574 | { |
|
| 575 | $m[0] = preg_replace('/\<embed/i', '<embed allowscriptaccess="never"', $m[0]); |
|
| 576 | } |
|
| 577 | } |
|
| 578 | return $m[0]; |
|
| 579 | } |
|
| 580 | ||
| 581 | function _addAllowScriptAccess($m) |
|
| 582 | { |
|
| @@ 415-446 (lines=32) @@ | ||
| 412 | return $m[0]; |
|
| 413 | } |
|
| 414 | ||
| 415 | function _checkAllowScriptAccess($m) |
|
| 416 | { |
|
| 417 | if($m[1] == 'object') |
|
| 418 | { |
|
| 419 | $this->allowscriptaccessList[] = 1; |
|
| 420 | } |
|
| 421 | ||
| 422 | if($m[1] == 'param') |
|
| 423 | { |
|
| 424 | if(stripos($m[0], 'allowscriptaccess')) |
|
| 425 | { |
|
| 426 | $m[0] = '<param name="allowscriptaccess" value="never"'; |
|
| 427 | if(substr($m[0], -1) == '/') |
|
| 428 | { |
|
| 429 | $m[0] .= '/'; |
|
| 430 | } |
|
| 431 | $this->allowscriptaccessList[count($this->allowscriptaccessList)-1]--; |
|
| 432 | } |
|
| 433 | } |
|
| 434 | else if($m[1] == 'embed') |
|
| 435 | { |
|
| 436 | if(stripos($m[0], 'allowscriptaccess')) |
|
| 437 | { |
|
| 438 | $m[0] = preg_replace('/always|samedomain/i', 'never', $m[0]); |
|
| 439 | } |
|
| 440 | else |
|
| 441 | { |
|
| 442 | $m[0] = preg_replace('/\<embed/i', '<embed allowscriptaccess="never"', $m[0]); |
|
| 443 | } |
|
| 444 | } |
|
| 445 | return $m[0]; |
|
| 446 | } |
|
| 447 | ||
| 448 | function getContent($add_popup_menu = true, $add_content_info = true, $resource_realpath = false, $add_xe_content_class = true, $stripEmbedTagException = false) |
|
| 449 | { |
|
