X-Git-Url: http://git.cyclocoop.org/?a=blobdiff_plain;f=includes%2Fupload%2FUploadBase.php;h=ea6ef30bdd4751b57175e192c1f6f2611749ba15;hb=69ae945e8d39972a07bea89ddb64bc0189b43ac2;hp=34226323adc48c6e5745d42e625ac4bfcb6a31f5;hpb=e81d5759354108f420b6216b34d7c376686bf9fd;p=lhc%2Fweb%2Fwiklou.git diff --git a/includes/upload/UploadBase.php b/includes/upload/UploadBase.php index 34226323ad..ea6ef30bdd 100644 --- a/includes/upload/UploadBase.php +++ b/includes/upload/UploadBase.php @@ -1507,6 +1507,7 @@ abstract class UploadBase { # fragment links are allowed. For all other tags, only data: # and fragment are allowed. if ( $stripped == 'href' + && $value !== '' && strpos( $value, 'data:' ) !== 0 && strpos( $value, '#' ) !== 0 ) {