From: Alexander Ebert Date: Mon, 12 Jan 2015 12:04:46 +0000 (+0100) Subject: Force stripping of all rel="" attributes X-Git-Tag: 2.1.0_Beta_4~103 X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=86955eeadcd268d2c19d3eba132493449f4d97f1;p=GitHub%2FWoltLab%2FWCF.git Force stripping of all rel="" attributes --- diff --git a/wcfsetup/install/files/js/3rdParty/redactor/plugins/wbbcode.js b/wcfsetup/install/files/js/3rdParty/redactor/plugins/wbbcode.js index 86fb2236f4..8c23c3b95b 100644 --- a/wcfsetup/install/files/js/3rdParty/redactor/plugins/wbbcode.js +++ b/wcfsetup/install/files/js/3rdParty/redactor/plugins/wbbcode.js @@ -226,6 +226,9 @@ RedactorPlugins.wbbcode = function() { // remove data-redactor-tag="" attribute html = html.replace(/(<[^>]+?) data-redactor-tag="[^"]+"/g, '$1'); + // remove rel="" attribute + html = html.replace(/(<[^>]+?) rel="[^"]+"/g, '$1'); + // remove zero-width space sometimes slipping through html = html.replace(/&#(8203|x200b);/g, '');