aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/develop
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2018-01-01 11:54:37 +0100
committerMarc Alexander <admin@m-a-styles.de>2018-01-01 11:54:37 +0100
commitbf5f11e11ac0f25441ba891fc16d5a780e4450e2 (patch)
tree12aa20249ca31f91fa3c8ab6795a2bce6f55f3a4 /phpBB/develop
parent0ff5f9fa0edf9ac3125cc4e871609a90cee1cfac (diff)
parentf7d387f93c421e93ef13375bd5e0fb408e921598 (diff)
downloadforums-bf5f11e11ac0f25441ba891fc16d5a780e4450e2.tar
forums-bf5f11e11ac0f25441ba891fc16d5a780e4450e2.tar.gz
forums-bf5f11e11ac0f25441ba891fc16d5a780e4450e2.tar.bz2
forums-bf5f11e11ac0f25441ba891fc16d5a780e4450e2.tar.xz
forums-bf5f11e11ac0f25441ba891fc16d5a780e4450e2.zip
Merge branch 'ticket/security/211' into ticket/security/211-rhea
Diffstat (limited to 'phpBB/develop')
-rw-r--r--phpBB/develop/regex_idn.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/develop/regex_idn.php b/phpBB/develop/regex_idn.php
index d871695c50..30373f8de3 100644
--- a/phpBB/develop/regex_idn.php
+++ b/phpBB/develop/regex_idn.php
@@ -120,7 +120,7 @@ do
$pct_encoded = "%[\dA-F]{2}";
$unreserved = "$add_chars\pL0-9\-._~";
$sub_delims = ($inline) ? '!$&\'(*+,;=' : '!$&\'()*+,;=';
- $scheme = ($inline) ? '[a-z][a-z\d+]*': '[a-z][a-z\d+\-.]*' ; // avoid automatic parsing of "word" in "last word.http://..."
+ $scheme = ($inline) ? '[a-z][a-z\d+]*(?<!javascript)': '[a-z][a-z\d+\-.]*(?<!javascript)' ; // avoid automatic parsing of "word" in "last word.http://..."
$pchar = "(?:[^$remove_chars]*[$unreserved$sub_delims:@|]+|$pct_encoded)"; // rfc: no "|"
$reg_name = "(?:[^$remove_chars]*[$unreserved$sub_delims:@|]+|$pct_encoded)+"; // rfc: * instead of + and no "|" and no "@" and no ":" (included instead of userinfo)