| commit | 3b6aa1059289718af710a86a9cc5acc1897996eb | |
| author | Edward Z. Yang <edwardzyang@thewritingpot.com> | |
| Thu, 10 Jul 2008 22:46:46 +0000 (10 18:46 -0400) | ||
| committer | Edward Z. Yang <edwardzyang@thewritingpot.com> | |
| Thu, 10 Jul 2008 22:46:46 +0000 (10 18:46 -0400) | ||
| tree | 61fd7ce911309938b673f4f81b699d7e8b86927d | treesnapshot (tar.gz zip) |
| parent | 3a4b92da81d610d6e97db1e088a725f2455a44b8 | commitdiff |
%URI.DisableExternal(Resources) uses %URI.Base if %URI.Host is not available.
As part of its duties, URIDefinition determine the base URL and the host URL
of the page based on the two corresponding configuration directives. The
DisableExternal URIFilter, however, bypassed this check by directly checking
%URI.Host. This fix forwards the call through URIDefinition.
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com>
As part of its duties, URIDefinition determine the base URL and the host URL
of the page based on the two corresponding configuration directives. The
DisableExternal URIFilter, however, bypassed this check by directly checking
%URI.Host. This fix forwards the call through URIDefinition.
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com>
| NEWS | diffblobblamehistory | |
| library/HTMLPurifier/URIFilter/DisableExternal.php | diffblobblamehistory | |
| tests/HTMLPurifier/URIFilter/DisableExternalTest.php | diffblobblamehistory |