From 3795b730340bc3c34c054e3d41fe9e33e4a3dc96 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Tue, 30 Oct 2012 16:34:17 +0400 Subject: [PATCH] htmLawed: tweak allowed attributes --- include/functions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/functions.php b/include/functions.php index 01ec3318..35fcbc45 100644 --- a/include/functions.php +++ b/include/functions.php @@ -2593,7 +2593,7 @@ $res = trim($str); if (!$res) return ''; - $config = array('safe' => 1, 'deny_attribute' => 'style', 'comment' => 1, 'cdata' => 1); + $config = array('safe' => 1, 'deny_attribute' => 'style, width, height', 'comment' => 1, 'cdata' => 1); $res = htmLawed($res, $config); if (get_pref($link, "STRIP_IMAGES", $owner)) { -- 2.39.5