diff --git a/inc/parser/xhtml.php b/inc/parser/xhtml.php index 22dc58963b72fb7927491480c93370e399d573d1..83359cd557ba1ac73ffc993728d90c911f3794e8 100644 --- a/inc/parser/xhtml.php +++ b/inc/parser/xhtml.php @@ -40,8 +40,6 @@ class Doku_Renderer_xhtml extends Doku_Renderer { var $_counter = array(); // used as global counter, introduced for table classes var $_codeblock = 0; // counts the code and file blocks, used to provide download links - private $schemes = null; // protocol schemes - /** * Register a new edit section range * @@ -882,14 +880,6 @@ class Doku_Renderer_xhtml extends Doku_Renderer { $this->doc .= '<li><div class="li">'; // support feeds without links $lnkurl = $item->get_permalink(); - if($lnkurl){ - // lnkurl might be an attack vector, only allow registered protocols - if(is_null($this->schemes)) $this->schemes = getSchemes(); - list($scheme) = explode('://',$lnkurl); - $scheme = strtolower($scheme); - if(!in_array($scheme,$this->schemes)) $lnkurl = ''; - } - if($lnkurl){ // title is escaped by SimplePie, we unescape here because it // is escaped again in externallink() FS#1705