[Fmsystem-commits] [17108] API data cleaner

[sigurdne]

Revision: 17108
          http://svn.sv.gnu.org/viewvc/?view=rev&root=fmsystem&revision=17108
Author:   sigurdne
Date:     2017-09-21 11:32:34 -0400 (Thu, 21 Sep 2017)
Log Message:
-----------
API data cleaner

Modified Paths:
--------------
    trunk/phpgwapi/inc/class.data_cleaner.inc.php

Modified: trunk/phpgwapi/inc/class.data_cleaner.inc.php
===================================================================
--- trunk/phpgwapi/inc/class.data_cleaner.inc.php       2017-09-21 15:31:38 UTC 
(rev 17107)
+++ trunk/phpgwapi/inc/class.data_cleaner.inc.php       2017-09-21 15:32:34 UTC 
(rev 17108)
@@ -252,9 +252,15 @@
                        // Just try to save a <a href="titi.org"> my site </a>
                        // you get a <a href="/phpgw/redirect.php?go=titi.org"> 
my site </a>
                        $data = 
preg_replace_callback('/href\s*=\s*([\\\]?["\']?)((?(1)[^\1]*?|[^\s]+))(?(1)\1|)/i',
-//                             create_function('$m', 'return \'href="\' . 
(strlen($m[2]) && $m[2]{0} == \'#\' ? $m[2] : 
$GLOBALS[\'phpgw\']->safe_redirect(urldecode($m[2]))) . \'"\';'),
                                function ($m)
                                {
+                                       $url = $m[2];
+
+                                       /**
+                                        * Taken care of by HTMLPurifier
+                                        */
+
+                               /*
                                        if(preg_match('/redirect.php\?go=/i', 
$m[2]))
                                        {
                                                $url = $m[2];
@@ -267,6 +273,7 @@
                                        {
                                                $url = strlen($m[2]) && 
$m[2]{0} == '#' ? $m[2] : $GLOBALS['phpgw']->safe_redirect(urldecode($m[2]));
                                        }
+                               */
                                        $ret = 'href="'. $url .'"';
                                        return $ret;
                                },