From 0c734b52b648fd1c26546306ad578a90ef6f0f72 Mon Sep 17 00:00:00 2001 From: Derek Jones Date: Wed, 27 Aug 2008 20:24:17 +0000 Subject: added isindex to the list of naughty never allowed tags in xss_clean() --- system/libraries/Input.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'system') diff --git a/system/libraries/Input.php b/system/libraries/Input.php index dc5b5e5a9..2682ce316 100644 --- a/system/libraries/Input.php +++ b/system/libraries/Input.php @@ -728,7 +728,7 @@ class CI_Input { * Becomes: <blink> * */ - $naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|layer|link|meta|object|plaintext|style|script|textarea|title|video|xml|xss'; + $naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|isindex|layer|link|meta|object|plaintext|style|script|textarea|title|video|xml|xss'; $str = preg_replace_callback('#<(/*\s*)('.$naughty.')([^><]*)([><]*)#is', array($this, '_sanitize_naughty_html'), $str); /* -- cgit v1.2.3-24-g4f1b