run markdown through html purifier for those who insist on mixing html with markdown.
This commit is contained in:
parent
75c10eaff5
commit
bd3d323849
@ -473,8 +473,9 @@ function item_post(&$a) {
|
|||||||
require_once('include/text.php');
|
require_once('include/text.php');
|
||||||
if($uid && $uid == $profile_uid && feature_enabled($uid,'markdown')) {
|
if($uid && $uid == $profile_uid && feature_enabled($uid,'markdown')) {
|
||||||
require_once('include/bb2diaspora.php');
|
require_once('include/bb2diaspora.php');
|
||||||
$body = escape_tags($body);
|
|
||||||
$body = str_replace("\n",'<br />', $body);
|
$body = str_replace("\n",'<br />', $body);
|
||||||
|
$body = purify_html($body);
|
||||||
|
|
||||||
$body = preg_replace_callback('/\[share(.*?)\]/ism','share_shield',$body);
|
$body = preg_replace_callback('/\[share(.*?)\]/ism','share_shield',$body);
|
||||||
$body = diaspora2bb($body,true);
|
$body = diaspora2bb($body,true);
|
||||||
$body = preg_replace_callback('/\[share(.*?)\]/ism','share_unshield',$body);
|
$body = preg_replace_callback('/\[share(.*?)\]/ism','share_unshield',$body);
|
||||||
|
@ -1 +1 @@
|
|||||||
2015-11-10.1212
|
2015-11-11.1213
|
||||||
|
Reference in New Issue
Block a user