| commit | e824d633ab4483d3afbea66545fb619bd57a4156 | |
| author | Michael Große <grosse@cosmocode.de> | |
| Fri, 19 Jan 2018 15:32:22 +0000 (19 16:32 +0100) | ||
| committer | Michael Große <grosse@cosmocode.de> | |
| Fri, 19 Jan 2018 15:32:22 +0000 (19 16:32 +0100) | ||
| tree | af18d7431d3774a83f3ace14e18fe04e2426cd5c | treesnapshot (tar.gz zip) |
| parent | 679dba01b427ea0357528be367261c2d30a26b22 | commitdiff |
fix: enforce optional svg & prevent arbitrary html in html_btn
To prevent abusing this functionality for inserting arbitrary html,
inlineSVG is now called inside the html_btn function.
To prevent abusing this functionality for inserting arbitrary html,
inlineSVG is now called inside the html_btn function.
| inc/Menu/Item/AbstractItem.php | diffblobblamehistory | |
| inc/html.php | diffblobblamehistory |