Thomas Bruederli
2014-06-05 ebfdc0925f7169aac45c2437d7a1196687a200c8
Fix check for data-* attributes after merge with dev-accessibility
1 files modified
4 ■■■■ changed files
program/lib/Roundcube/html.php 4 ●●●● patch | view | raw | blame | history
program/lib/Roundcube/html.php
@@ -283,11 +283,11 @@
                continue;
            }
            // ignore not allowed attributes, except data-*
            // ignore not allowed attributes, except aria-* and data-*
            if (!empty($allowed)) {
                $is_data_attr = @substr_compare($key, 'data-', 0, 5) === 0;
                $is_aria_attr = @substr_compare($key, 'aria-', 0, 5) === 0;
                if (!$is_aria_attr && !isset($allowed_f[$key]) && (!$is_data_attr || !isset($allowed_f['data-*']))) {
                if (!$is_aria_attr && !$is_data_attr && !isset($allowed_f[$key])) {
                    continue;
                }
            }