From a3d562ccd1474d5fa9492ea1290796cb1c7cbcfa Mon Sep 17 00:00:00 2001 From: Mark Holmquist Date: Mon, 31 Oct 2016 08:21:38 -0500 Subject: [PATCH] Allow empty href in SVGs bawolff is right, this shouldn't harm anything. Bug: T149549 Change-Id: I377efdee7478940154ef5ec921bd0c8f7ec0c110 --- includes/upload/UploadBase.php | 1 + 1 file changed, 1 insertion(+) diff --git a/includes/upload/UploadBase.php b/includes/upload/UploadBase.php index 34226323ad..ea6ef30bdd 100644 --- a/includes/upload/UploadBase.php +++ b/includes/upload/UploadBase.php @@ -1507,6 +1507,7 @@ abstract class UploadBase { # fragment links are allowed. For all other tags, only data: # and fragment are allowed. if ( $stripped == 'href' + && $value !== '' && strpos( $value, 'data:' ) !== 0 && strpos( $value, '#' ) !== 0 ) { -- 2.20.1