Sfoglia il codice sorgente

update javaScriptEscape to escape only <script tags instead of script string (otherwise sub/superscript would be broken and that would be bad for editor localization) - Separated commit so it doesn't get lost in the middle of the other coming

Signed-off-by: emanuele <[email protected]>
emanuele 12 anni fa
parent
commit
1fd7b6abe4
1 ha cambiato i file con 1 aggiunte e 1 eliminazioni
  1. 1 1
      Sources/QueryString.php

+ 1 - 1
Sources/QueryString.php

@@ -571,7 +571,7 @@ function JavaScriptEscape($string)
 		'\\' => '\\\\',
 		'\'' => '\\\'',
 		'</' => '<\' + \'/',
-		'script' => 'scri\'+\'pt',
+		'<script' => '<scri\'+\'pt',
 		'<body>' => '<bo\'+\'dy>',
 		'<a href' => '<a hr\'+\'ef',
 		$scripturl => '\' + smf_scripturl + \'',