diff options
| author | marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544> | 2009-02-12 14:14:00 +0000 |
|---|---|---|
| committer | marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544> | 2009-02-12 14:14:00 +0000 |
| commit | a254cad13911991d0673122ecd3d76b6973e5d42 (patch) | |
| tree | 2f7634040b4cd3affc3068d46e0327228609bb72 /vendors | |
| parent | ac8dc55c78d5f64b91a1eeda023cd1caff900511 (diff) | |
| download | elgg-a254cad13911991d0673122ecd3d76b6973e5d42.tar.gz elgg-a254cad13911991d0673122ecd3d76b6973e5d42.tar.bz2 | |
Refs #561: Removed & encoding from kses but retaining script input and entities.
git-svn-id: https://code.elgg.org/elgg/trunk@2724 36083f99-b078-4883-b0ff-0f9b5a30f544
Diffstat (limited to 'vendors')
| -rw-r--r-- | vendors/kses/kses.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/vendors/kses/kses.php b/vendors/kses/kses.php index d97d8601d..65da29599 100644 --- a/vendors/kses/kses.php +++ b/vendors/kses/kses.php @@ -513,7 +513,7 @@ function kses_normalize_entities($string) { # Disarm all entities by converting & to & - $string = str_replace('&', '&', $string); + // $string = str_replace('&', '&', $string); // [Marcus Povey 20090212: Commented out in ref #561. Needs a better solution. ] # Change back the allowed entities in our entity whitelist |