commit 0c734b52b648fd1c26546306ad578a90ef6f0f72
author Derek Jones <derek.jones@ellislab.com> Wed Aug 27 20:24:17 2008 +0000
committer Derek Jones <derek.jones@ellislab.com> Wed Aug 27 20:24:17 2008 +0000
tree abbc22f80f25741ec6ccef8febc4b6d2bd34719a
parent 9dee6ec7bf77e15a1227785292e507f1a6126a8f

added isindex to the list of naughty never allowed tags in xss_clean()

system/libraries/Input.php

diff --git a/system/libraries/Input.php b/system/libraries/Input.php
index dc5b5e5..2682ce3 100644
--- a/system/libraries/Input.php
+++ b/system/libraries/Input.php
@@ -728,7 +728,7 @@
 		 * Becomes: <blink>

 		 *

 		 */

-		$naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|layer|link|meta|object|plaintext|style|script|textarea|title|video|xml|xss';

+		$naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|isindex|layer|link|meta|object|plaintext|style|script|textarea|title|video|xml|xss';

 		$str = preg_replace_callback('#<(/*\s*)('.$naughty.')([^><]*)([><]*)#is', array($this, '_sanitize_naughty_html'), $str);

 

 		/*