prevent unwanted code execution via CURLOPT_POSTFIELDS

Till Krüss

2014-02-10 334475a50bcc97a8c326aadff0dcbb61fad40a4f

 program/js/tiny_mce/plugins/tabfocus/editor_plugin_src.js

@@ -1,122 +1,122 @@
/**

 * editor_plugin_src.js

 *

 * Copyright 2009, Moxiecode Systems AB

 * Released under LGPL License.

 *

 * License: http://tinymce.moxiecode.com/license

 * Contributing: http://tinymce.moxiecode.com/contributing

 */



(function() {

   var DOM = tinymce.DOM, Event = tinymce.dom.Event, each = tinymce.each, explode = tinymce.explode;



   tinymce.create('tinymce.plugins.TabFocusPlugin', {

      init : function(ed, url) {

         function tabCancel(ed, e) {

            if (e.keyCode === 9)

               return Event.cancel(e);

         }



         function tabHandler(ed, e) {

            var x, i, f, el, v;



            function find(d) {

               el = DOM.select(':input:enabled,*[tabindex]:not(iframe)');



               function canSelectRecursive(e) {

                  return e.nodeName==="BODY" || (e.type != 'hidden' &&

                     !(e.style.display == "none") &&

                     !(e.style.visibility == "hidden") && canSelectRecursive(e.parentNode));

               }

               function canSelectInOldIe(el) {

                  return el.attributes["tabIndex"].specified || el.nodeName == "INPUT" || el.nodeName == "TEXTAREA";

               }

               function isOldIe() {

                  return tinymce.isIE6 || tinymce.isIE7;

               }

               function canSelect(el) {

                  return ((!isOldIe() || canSelectInOldIe(el))) && el.getAttribute("tabindex") != '-1' && canSelectRecursive(el);

               }



               each(el, function(e, i) {

                  if (e.id == ed.id) {

                     x = i;

                     return false;

                  }

               });

               if (d > 0) {

                  for (i = x + 1; i < el.length; i++) {

                     if (canSelect(el[i]))

                        return el[i];

                  }

               } else {

                  for (i = x - 1; i >= 0; i--) {

                     if (canSelect(el[i]))

                        return el[i];

                  }

               }



               return null;

            }



            if (e.keyCode === 9) {

               v = explode(ed.getParam('tab_focus', ed.getParam('tabfocus_elements', ':prev,:next')));



               if (v.length == 1) {

                  v[1] = v[0];

                  v[0] = ':prev';

               }



               // Find element to focus

               if (e.shiftKey) {

                  if (v[0] == ':prev')

                     el = find(-1);

                  else

                     el = DOM.get(v[0]);

               } else {

                  if (v[1] == ':next')

                     el = find(1);

                  else

                     el = DOM.get(v[1]);

               }



               if (el) {

                  if (el.id && (ed = tinymce.get(el.id || el.name)))

                     ed.focus();

                  else

                     window.setTimeout(function() {

                        if (!tinymce.isWebKit)

                           window.focus();

                        el.focus();

                     }, 10);



                  return Event.cancel(e);

               }

            }

         }



         ed.onKeyUp.add(tabCancel);



         if (tinymce.isGecko) {

            ed.onKeyPress.add(tabHandler);

            ed.onKeyDown.add(tabCancel);

         } else

            ed.onKeyDown.add(tabHandler);



      },



      getInfo : function() {

         return {

            longname : 'Tabfocus',

            author : 'Moxiecode Systems AB',

            authorurl : 'http://tinymce.moxiecode.com',

            infourl : 'http://wiki.moxiecode.com/index.php/TinyMCE:Plugins/tabfocus',

            version : tinymce.majorVersion + "." + tinymce.minorVersion

         };

      }

   });



   // Register plugin

   tinymce.PluginManager.add('tabfocus', tinymce.plugins.TabFocusPlugin);

})();

/**
 * editor_plugin_src.js
 *
 * Copyright 2009, Moxiecode Systems AB
 * Released under LGPL License.
 *
 * License: http://tinymce.moxiecode.com/license
 * Contributing: http://tinymce.moxiecode.com/contributing
 */

(function() {
   var DOM = tinymce.DOM, Event = tinymce.dom.Event, each = tinymce.each, explode = tinymce.explode;

   tinymce.create('tinymce.plugins.TabFocusPlugin', {
      init : function(ed, url) {
         function tabCancel(ed, e) {
            if (e.keyCode === 9)
               return Event.cancel(e);
         }

         function tabHandler(ed, e) {
            var x, i, f, el, v;

            function find(d) {
               el = DOM.select(':input:enabled,*[tabindex]:not(iframe)');

               function canSelectRecursive(e) {
                  return e.nodeName==="BODY" || (e.type != 'hidden' &&
                     !(e.style.display == "none") &&
                     !(e.style.visibility == "hidden") && canSelectRecursive(e.parentNode));
               }
               function canSelectInOldIe(el) {
                  return el.attributes["tabIndex"].specified || el.nodeName == "INPUT" || el.nodeName == "TEXTAREA";
               }
               function isOldIe() {
                  return tinymce.isIE6 || tinymce.isIE7;
               }
               function canSelect(el) {
                  return ((!isOldIe() || canSelectInOldIe(el))) && el.getAttribute("tabindex") != '-1' && canSelectRecursive(el);
               }

               each(el, function(e, i) {
                  if (e.id == ed.id) {
                     x = i;
                     return false;
                  }
               });
               if (d > 0) {
                  for (i = x + 1; i < el.length; i++) {
                     if (canSelect(el[i]))
                        return el[i];
                  }
               } else {
                  for (i = x - 1; i >= 0; i--) {
                     if (canSelect(el[i]))
                        return el[i];
                  }
               }

               return null;
            }

            if (e.keyCode === 9) {
               v = explode(ed.getParam('tab_focus', ed.getParam('tabfocus_elements', ':prev,:next')));

               if (v.length == 1) {
                  v[1] = v[0];
                  v[0] = ':prev';
               }

               // Find element to focus
               if (e.shiftKey) {
                  if (v[0] == ':prev')
                     el = find(-1);
                  else
                     el = DOM.get(v[0]);
               } else {
                  if (v[1] == ':next')
                     el = find(1);
                  else
                     el = DOM.get(v[1]);
               }

               if (el) {
                  if (el.id && (ed = tinymce.get(el.id || el.name)))
                     ed.focus();
                  else
                     window.setTimeout(function() {
                        if (!tinymce.isWebKit)
                           window.focus();
                        el.focus();
                     }, 10);

                  return Event.cancel(e);
               }
            }
         }

         ed.onKeyUp.add(tabCancel);

         if (tinymce.isGecko) {
            ed.onKeyPress.add(tabHandler);
            ed.onKeyDown.add(tabCancel);
         } else
            ed.onKeyDown.add(tabHandler);

      },

      getInfo : function() {
         return {
            longname : 'Tabfocus',
            author : 'Moxiecode Systems AB',
            authorurl : 'http://tinymce.moxiecode.com',
            infourl : 'http://wiki.moxiecode.com/index.php/TinyMCE:Plugins/tabfocus',
            version : tinymce.majorVersion + "." + tinymce.minorVersion
         };
      }
   });

   // Register plugin
   tinymce.PluginManager.add('tabfocus', tinymce.plugins.TabFocusPlugin);
})();