Version 4.3.0
This commit is contained in:
1 parent
96997ddd8e
commit
fe1acf984a
1349 files changed
+116159
-67711
No files matched your search
@@ -42,7 +42,7 @@ class _Expression
|
||||
}
|
||||
else
|
||||
{
|
||||
return 'htmlspecialchars( ' . \IPS\Theme::expandShortcuts( $data ) . ', ENT_QUOTES | \IPS\HTMLENTITIES, \'UTF-8\', FALSE )';
|
||||
return 'htmlspecialchars( ' . \IPS\Theme::expandShortcuts( $data ) . ', ENT_QUOTES | ENT_DISALLOWED, \'UTF-8\', FALSE )';
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -74,7 +74,7 @@ class _Hextorgb
|
||||
/* Basic validation */
|
||||
if( !preg_match( "/^#?[0-9a-fA-F]+$/", $data ) OR ( \strlen( str_replace( '#', '', $data ) ) !== 3 AND \strlen( str_replace( '#', '', $data ) ) !== 6 ) )
|
||||
{
|
||||
return "htmlspecialchars( '" . $data . "', ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', FALSE )";
|
||||
return "htmlspecialchars( '" . $data . "', ENT_QUOTES | ENT_DISALLOWED, 'UTF-8', FALSE )";
|
||||
}
|
||||
|
||||
$data = str_replace( '#', '', $data );
|
||||
|
||||
@@ -109,7 +109,7 @@ class _Lang
|
||||
$vle = 'FALSE';
|
||||
}
|
||||
|
||||
$return['return'] = '\IPS\Member::loggedIn()->language()->addToStack( htmlspecialchars( ' . $data . ', \IPS\HTMLENTITIES, \'UTF-8\', FALSE ), ' . $vle . ', array( ' . implode( ", ", $params ) . ' ) )';
|
||||
$return['return'] = '\IPS\Member::loggedIn()->language()->addToStack( htmlspecialchars( ' . $data . ', ENT_DISALLOWED, \'UTF-8\', FALSE ), ' . $vle . ', array( ' . implode( ", ", $params ) . ' ) )';
|
||||
|
||||
return $return;
|
||||
}
|
||||
|
||||
@@ -58,7 +58,7 @@ class _Member
|
||||
}
|
||||
else
|
||||
{
|
||||
return "htmlspecialchars( {$member}->$data, ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', FALSE )";
|
||||
return "htmlspecialchars( {$member}->$data, ENT_QUOTES | ENT_DISALLOWED, 'UTF-8', FALSE )";
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -42,7 +42,7 @@ class _Request
|
||||
}
|
||||
else
|
||||
{
|
||||
return "htmlspecialchars( \IPS\Request::i()->$data, ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', FALSE )";
|
||||
return "htmlspecialchars( \IPS\Request::i()->$data, ENT_QUOTES | ENT_DISALLOWED, 'UTF-8', FALSE )";
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -39,7 +39,7 @@ class _Setting
|
||||
{
|
||||
if ( isset( $options['escape'] ) )
|
||||
{
|
||||
return "htmlspecialchars( \IPS\Settings::i()->$data, ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', TRUE )";
|
||||
return "htmlspecialchars( \IPS\Settings::i()->$data, ENT_QUOTES | ENT_DISALLOWED, 'UTF-8', TRUE )";
|
||||
}
|
||||
else
|
||||
{
|
||||
|
||||
@@ -47,6 +47,6 @@ class _Truncate
|
||||
$_argument = ( mb_strpos( $data, '$' ) !== FALSE ) ? $data : '"' . $data . '"';
|
||||
$_length = ( mb_strpos( $options['length'], '$' ) !== FALSE ) ? $options['length'] : '"' . $options['length'] . '"';
|
||||
|
||||
return "htmlspecialchars( mb_substr( html_entity_decode( {$_argument} ), '{$options['start']}', {$_length} ), ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', FALSE ) . ( ( mb_strlen( html_entity_decode( {$_argument} ) ) > {$_length} ) ? '{$options['append']}' : '' )";
|
||||
return "htmlspecialchars( mb_substr( html_entity_decode( {$_argument} ), '{$options['start']}', {$_length} ), ENT_QUOTES | ENT_DISALLOWED, 'UTF-8', FALSE ) . ( ( mb_strlen( html_entity_decode( {$_argument} ) ) > {$_length} ) ? '{$options['append']}' : '' )";
|
||||
}
|
||||
}
|
||||
@@ -37,6 +37,6 @@ class _Wordbreak
|
||||
*/
|
||||
public static function runPlugin( $data, $options )
|
||||
{
|
||||
return "\IPS\Lang::wordbreak( htmlspecialchars( {$data}, ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', FALSE ) )";
|
||||
return "\IPS\Lang::wordbreak( htmlspecialchars( {$data}, ENT_QUOTES | ENT_DISALLOWED, 'UTF-8', FALSE ) )";
|
||||
}
|
||||
}
|
||||
Reference in new issue
Block a user