Aleksander Machniak
2013-01-08 16915ee2ad97060e0c0c9376adf7eca77516cd86
Don't convert to link a text with < and > characters
2 files modified
4 ■■■ changed files
program/lib/Roundcube/rcube_string_replacer.php 2 ●●● patch | view | raw | blame | history
tests/Framework/StringReplacer.php 2 ●●●●● patch | view | raw | blame | history
program/lib/Roundcube/rcube_string_replacer.php
@@ -34,7 +34,7 @@
    {
        // Simplified domain expression for UTF8 characters handling
        // Support unicode/punycode in top-level domain part
        $utf_domain = '[^?&@"\'\\/()\s\r\t\n]+\\.?([^\\x00-\\x2f\\x3b-\\x40\\x5b-\\x60\\x7b-\\x7f]{2,}|xn--[a-zA-Z0-9]{2,})';
        $utf_domain = '[^?&@"\'\\/()<>\s\r\t\n]+\\.?([^\\x00-\\x2f\\x3b-\\x40\\x5b-\\x60\\x7b-\\x7f]{2,}|xn--[a-zA-Z0-9]{2,})';
        $url1       = '.:;,';
        $url2       = 'a-zA-Z0-9%=#$@+?!&\\/_~\\[\\]\\(\\){}\*-';
tests/Framework/StringReplacer.php
@@ -35,6 +35,8 @@
            array('(http://link.com)', '(<a href="http://link.com" target="_blank">http://link.com</a>)'),
            array('http://link.com?a(b)c', '<a href="http://link.com?a(b)c" target="_blank">http://link.com?a(b)c</a>'),
            array('http://link.com?(link)', '<a href="http://link.com?(link)" target="_blank">http://link.com?(link)</a>'),
            array('http://<test>', 'http://<test>'),
            array('http://', 'http://'),
        );
    }