From 3527404731dd86e6c7a0ad363c5a48935bac513e Mon Sep 17 00:00:00 2001 From: Gabriel Wicke Date: Wed, 28 Apr 2004 21:01:09 +0000 Subject: [PATCH] parser to the rescue to secure the content this returns- no js in html please --- includes/RawPage.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/includes/RawPage.php b/includes/RawPage.php index 7aaa9e8372..56662faaa8 100644 --- a/includes/RawPage.php +++ b/includes/RawPage.php @@ -27,10 +27,14 @@ class RawPage { header( "Content-type: ".$this->mContentType.'; charset='.$this->mCharset ); # allow the client to cache this for 24 hours header( 'Cache-Control: s-maxage=0, max-age=86400' ); - echo $this->getrawtext(); + $parser=new Parser(); + $raw = $this->getrawtext(); + echo $parser->removeHTMLtags( $raw ); wfAbruptExit(); } + + function getrawtext () { global $wgInputEncoding, $wgLang; if( !$this->mTitle ) return ''; -- 2.20.1