[SPIP][PLUGINS] v3.0-->v3.2

[lhc/web/www.git] / www / plugins-dist / textwheel / wheels / spip / echappe-js.yaml

diff --git a/www/plugins-dist/textwheel/wheels/spip/echappe-js.yaml b/www/plugins-dist/textwheel/wheels/spip/echappe-js.yaml
index 9684738..84c65f2 100644 (file)
--- a/www/plugins-dist/textwheel/wheels/spip/echappe-js.yaml
+++ b/www/plugins-dist/textwheel/wheels/spip/echappe-js.yaml
@@ -18,3 +18,51 @@
     -
       type: all
       replace: "<code class=\"echappe-js\">$0</code>"
+
+-
+  if_str: "<iframe"
+  match: "{<iframe.*?($|</iframe.)}isS"
+  is_callback: Y
+  replace: echappe_anti_xss
+
+-
+  if_str: "<embed"
+  match: "{<embed.*?($|</embed.)}isS"
+  is_callback: Y
+  replace: echappe_anti_xss
+
+-
+  if_str: "<object"
+  match: "{<object.*?($|</object.)}isS"
+  is_callback: Y
+  replace: echappe_anti_xss
+
+-
+  if_str: "<img"
+  match: "{<img.*?($|>)}isS"
+  is_callback: Y
+  replace: echappe_anti_xss
+
+-
+  if_str: "<image"
+  match: "{<image.*?($|>)}isS"
+  is_callback: Y
+  replace: echappe_anti_xss
+
+-
+  if_str: "<body"
+  match: "{<body.*?($|>)}isS"
+  is_callback: Y
+  replace: echappe_anti_xss
+
+-
+  if_str: "<bgsound"
+  match: "{<bgsound.*?($|>)}isS"
+  is_callback: Y
+  replace: echappe_anti_xss
+
+-
+  if_str: "<meta"
+  match: "{<meta.*?($|>)}isS"
+  is_callback: Y
+  replace: echappe_anti_xss