Allow data-* attributes (#1489860)

Aleksander Machniak

2014-05-08 7079110c61d41020912baab91cef8b3a3acdb577

Allow data-* attributes (#1489860)

 program/include/rcmail_output_html.php

@@ -1232,7 +1232,7 @@

        // generate html code for button
        if ($btn_content) {
            $attrib_str = html::attrib_string($attrib, array_merge($link_attrib, array('data-*')));
            $attrib_str = html::attrib_string($attrib, $link_attrib);
            $out = sprintf('<a%s>%s</a>', $attrib_str, $btn_content);
        }


 program/lib/Roundcube/html.php

@@ -283,10 +283,9 @@
                continue;
            }

            // ignore not allowed attributes
            // ignore not allowed attributes, except data-*
            if (!empty($allowed)) {
                $is_data_attr = @substr_compare($key, 'data-', 0, 5) === 0;
                if (!isset($allowed_f[$key]) && (!$is_data_attr || !isset($allowed_f['data-*']))) {
                if (!isset($allowed_f[$key]) && @substr_compare($key, 'data-', 0, 5) !== 0) {
                    continue;
                }
            }