From 5a2f326fba4cd3f692b56807e5a169b54253fda9 Mon Sep 17 00:00:00 2001
From: Andreas Gohr <andi@splitbrain.org>
Date: Tue, 14 Jun 2011 19:58:44 +0200
Subject: [PATCH] Revert "Only allow known protocols in RSS links"
This reverts commit 1ca2719c7488662ebd7964c0d026e0890f923ee9 as it is
now superseeded by a6b82e436e3d68a42a6556165d6aaf9249db44cd
---
inc/parser/xhtml.php | 10 ----------
1 file changed, 10 deletions(-)
diff --git a/inc/parser/xhtml.php b/inc/parser/xhtml.php
index 22dc58963..83359cd55 100644
--- a/inc/parser/xhtml.php
+++ b/inc/parser/xhtml.php
@@ -40,8 +40,6 @@ class Doku_Renderer_xhtml extends Doku_Renderer {
var $_counter = array(); // used as global counter, introduced for table classes
var $_codeblock = 0; // counts the code and file blocks, used to provide download links
- private $schemes = null; // protocol schemes
-
/**
* Register a new edit section range
*
@@ -882,14 +880,6 @@ class Doku_Renderer_xhtml extends Doku_Renderer {
$this->doc .= '<li><div class="li">';
// support feeds without links
$lnkurl = $item->get_permalink();
- if($lnkurl){
- // lnkurl might be an attack vector, only allow registered protocols
- if(is_null($this->schemes)) $this->schemes = getSchemes();
- list($scheme) = explode('://',$lnkurl);
- $scheme = strtolower($scheme);
- if(!in_array($scheme,$this->schemes)) $lnkurl = '';
- }
-
if($lnkurl){
// title is escaped by SimplePie, we unescape here because it
// is escaped again in externallink() FS#1705
--
GitLab