public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2026-01-03 00:49:14 +00:00
Code Issues Releases Wiki Activity

disable scripts in rss entry content

Browse Source
This commit is contained in:
Andrew Dolgov
2006-08-05 13:00:01 +01:00
parent 5c365f6055
commit d48d160c64
2 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
functions.php
View File

@@ -530,6 +530,13 @@
}
# sanitize content
$entry_content = preg_replace('/<script.*?>/i',
"<p class=\"scriptWarn\">", $entry_content);
$entry_content = preg_replace('/<\/script>/i',
"</p>", $entry_content);
db_query($link, "BEGIN");
if (db_num_rows($result) == 0) {

12
tt-rss.css
View File

@@ -1145,3 +1145,15 @@ span.debugTS {
#backReqBox {
display : none;
}
.scriptWarn:before {
content : "Disabled script:";
}
.scriptWarn {
color : white;
background-color : #903030;
border : 1px solid #601010;
padding : 3px;
font-weight : bold;
}