Merge pull request #7304 from MrPetovan/bug/smilies-escape-code-blocks

Escape HTML pre-formatted blocks before converting smilies
2022.09-rc
Philipp 2019-06-23 03:00:22 +02:00 zatwierdzone przez GitHub
commit 5306622225
Nie znaleziono w bazie danych klucza dla tego podpisu
ID klucza GPG: 4AEE18F83AFDEB23
1 zmienionych plików z 6 dodań i 4 usunięć

Wyświetl plik

@ -213,7 +213,8 @@ class Smilies
return $text;
}
$text = preg_replace_callback('/<code>(.*?)<\/code>/ism', 'self::encode', $text);
$text = preg_replace_callback('/<(pre)>(.*?)<\/pre>/ism', 'self::encode', $text);
$text = preg_replace_callback('/<(code)>(.*?)<\/code>/ism', 'self::encode', $text);
if ($no_images) {
$cleaned = ['texts' => [], 'icons' => []];
@ -230,7 +231,8 @@ class Smilies
$text = preg_replace_callback('/&lt;(3+)/', 'self::pregHeart', $text);
$text = self::strOrigReplace($smilies['texts'], $smilies['icons'], $text);
$text = preg_replace_callback('/<code>(.*?)<\/code>/ism', 'self::decode', $text);
$text = preg_replace_callback('/<(code)>(.*?)<\/code>/ism', 'self::decode', $text);
$text = preg_replace_callback('/<(pre)>(.*?)<\/pre>/ism', 'self::decode', $text);
return $text;
}
@ -242,7 +244,7 @@ class Smilies
*/
private static function encode($m)
{
return '<code>' . Strings::base64UrlEncode($m[1]) . '</code>';
return '<' . $m[1] . '>' . Strings::base64UrlEncode($m[2]) . '</' . $m[1] . '>';
}
/**
@ -253,7 +255,7 @@ class Smilies
*/
private static function decode($m)
{
return '<code>' . Strings::base64UrlDecode($m[1]) . '</code>';
return '<' . $m[1] . '>' . Strings::base64UrlDecode($m[2]) . '</' . $m[1] . '>';
}