aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/phpbb/textformatter/s9e/factory.php
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2019-07-17 22:02:32 +0200
committerMarc Alexander <admin@m-a-styles.de>2019-07-17 22:02:32 +0200
commitc934d3fcfdaaa1e8c2161577690fef9dcb41b1e1 (patch)
treee2e0a7e2035600a339e24c1aff9103c9623d9693 /phpBB/phpbb/textformatter/s9e/factory.php
parentb5a997ce183fa655af4c03b5f92a58a1a3e7c2f1 (diff)
downloadforums-c934d3fcfdaaa1e8c2161577690fef9dcb41b1e1.tar
forums-c934d3fcfdaaa1e8c2161577690fef9dcb41b1e1.tar.gz
forums-c934d3fcfdaaa1e8c2161577690fef9dcb41b1e1.tar.bz2
forums-c934d3fcfdaaa1e8c2161577690fef9dcb41b1e1.tar.xz
forums-c934d3fcfdaaa1e8c2161577690fef9dcb41b1e1.zip
[ticket/security/243] Limit size BBCode to 4 numeric characters
SECURITY-243
Diffstat (limited to 'phpBB/phpbb/textformatter/s9e/factory.php')
-rw-r--r--phpBB/phpbb/textformatter/s9e/factory.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/phpbb/textformatter/s9e/factory.php b/phpBB/phpbb/textformatter/s9e/factory.php
index 6191b9a315..d339e3311d 100644
--- a/phpBB/phpbb/textformatter/s9e/factory.php
+++ b/phpBB/phpbb/textformatter/s9e/factory.php
@@ -110,7 +110,7 @@ class factory implements \phpbb\textformatter\cache_interface
'i' => '<span style="font-style: italic"><xsl:apply-templates/></span>',
'u' => '<span style="text-decoration: underline"><xsl:apply-templates/></span>',
'img' => '<img src="{IMAGEURL}" class="postimage" alt="{L_IMAGE}"/>',
- 'size' => '<span style="font-size: {FONTSIZE}%; line-height: normal"><xsl:apply-templates/></span>',
+ 'size' => '<span><xsl:attribute name="style"><xsl:text>font-size: </xsl:text><xsl:value-of select="substring(@FONTSIZE, 1, 4)"/><xsl:text>%; line-height: normal</xsl:text></xsl:attribute><xsl:apply-templates/></span>',
'color' => '<span style="color: {COLOR}"><xsl:apply-templates/></span>',
'email' => '<a>
<xsl:attribute name="href">