Fix XSS issue with href="javascript:" not being removed (#1488613)

Aleksander Machniak

2012-08-15 b3206b4b2822b8c9d18c4730aa1afdf72a758f8c

 program/include/html.php

@@ -317,7 +317,8 @@
{
    protected $tagname = 'input';
    protected $type = 'text';
    protected $allowed = array('type','name','value','size','tabindex',
    protected $allowed = array(
        'type','name','value','size','tabindex','autocapitalize',
        'autocomplete','checked','onchange','onclick','disabled','readonly',
        'spellcheck','results','maxlength','src','multiple','placeholder');