Force stripping of all rel="" attributes

diff --git a/wcfsetup/install/files/js/3rdParty/redactor/plugins/wbbcode.js b/wcfsetup/install/files/js/3rdParty/redactor/plugins/wbbcode.js
index 86fb2236f426d1cf92ae56ff0b99417ea2602a5c..8c23c3b95b0ae233dd788b330517a5be02b6dc8a 100644 (file)
--- a/wcfsetup/install/files/js/3rdParty/redactor/plugins/wbbcode.js
+++ b/wcfsetup/install/files/js/3rdParty/redactor/plugins/wbbcode.js
@@ -226,6 +226,9 @@ RedactorPlugins.wbbcode = function() {
                        // remove data-redactor-tag="" attribute
                        html = html.replace(/(<[^>]+?) data-redactor-tag="[^"]+"/g, '$1');
                        
+                       // remove rel="" attribute
+                       html = html.replace(/(<[^>]+?) rel="[^"]+"/g, '$1');
+                       
                        // remove zero-width space sometimes slipping through
                        html = html.replace(/&#(8203|x200b);/g, '');