* (bug 2152) Add missing bgcolor to attribute whitelist for <td> and <th>

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 55a301f..4853a3f 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -181,6 +181,7 @@ Various bugfixes, small features, and a few experimental things:
 * dumpBackup.php can dump the full database to Export XML, with current
   revisions only or complete histories.
 * (bug 2150) Fix tab indexes on edit form
+* (bug 2152) Add missing bgcolor to attribute whitelist for <td> and <th>
 
 
 === Caveats ===

diff --git a/includes/Sanitizer.php b/includes/Sanitizer.php
index faac940..116a803 100644 (file)
--- a/includes/Sanitizer.php
+++ b/includes/Sanitizer.php
@@ -683,8 +683,9 @@ class Sanitizer {
                                    'rowspan',
                                    'colspan',
                                    'nowrap', # deprecated
-                                   'width', # deprecated
-                                   'height' # deprecated
+                                   'width',  # deprecated
+                                   'height', # deprecated
+                                   'bgcolor' # deprecated
                                    );
                
                # Numbers refer to sections in HTML 4.01 standard describing the element.