From: Bryan Tong Minh <btongminh@users.mediawiki.org>
Date: Wed, 23 Sep 2009 14:13:42 +0000 (+0000)
Subject: (bug 20780) Fix in UploadBase::detectScript: should check for '<a href', not '<a... 
X-Git-Tag: 1.31.0-rc.0~39561
X-Git-Url: http://git.cyclocoop.org/url?a=commitdiff_plain;h=a9f57182db734e729274a8325b153b03cc4ffa38;p=lhc%2Fweb%2Fwiklou.git

(bug 20780) Fix in UploadBase::detectScript: should check for '<a href', not '<a'. The question remains on whether detectScript is redundant to IEContentAnalyzer.
---

diff --git a/includes/upload/UploadBase.php b/includes/upload/UploadBase.php
index 4c96005a77..3a6b7e54ee 100644
--- a/includes/upload/UploadBase.php
+++ b/includes/upload/UploadBase.php
@@ -678,7 +678,7 @@ abstract class UploadBase {
 		* when served with a generic content-type.
 		*/
 		$tags = array(
-			'<a',
+			'<a href',
 			'<body',
 			'<head',
 			'<html',   #also in safari