#103563: Restore removing of HTML comments in filter_xss()

2006-12-16 01:05:11 +00:00 · 2006-12-16 01:05:11 +00:00 · 1776eadc92
parent 9f8ef08ce9
commit 1776eadc92
1 changed files with 1 additions and 1 deletions
--- a/modules/filter/filter.module
+++ b/modules/filter/filter.module
@ -1278,7 +1278,7 @@ function filter_xss($string, $allowed_tags = array('a', 'em', 'strong', 'cite',

  return preg_replace_callback('%
    (
-    <(?=[^a-zA-Z/])   # a lone <
+    <(?=[^a-zA-Z!/])  # a lone <
    |                 # or
    <[^>]*.(>|$)      # a string that starts with a <, up until the > or the end of the string
    |                 # or