Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)

Aleksander Machniak

2013-10-17 037af6890fe6fdb84a08d3c86083e847c90ec0ad

 program/js/tiny_mce/themes/advanced/js/image.js

@@ -104,10 +104,12 @@
   },



   updateStyle : function() {

      var dom = tinyMCEPopup.dom, st, v, f = document.forms[0];

      var dom = tinyMCEPopup.dom, st = {}, v, f = document.forms[0];



      if (tinyMCEPopup.editor.settings.inline_styles) {

         st = tinyMCEPopup.dom.parseStyle(this.styleVal);

         tinymce.each(tinyMCEPopup.dom.parseStyle(this.styleVal), function(value, key) {

            st[key] = value;

         });



         // Handle align

         v = getSelectValue(f, 'align');