From d99a96ef4979e9c5840f7a7534f8c327434e5cb9 Mon Sep 17 00:00:00 2001
From: Matthew Exon <mat@exon.name>
Date: Mon, 30 Jan 2017 00:55:38 +0000
Subject: [PATCH] Global is an integer, do not set it to an empty string
---
include/bbcode.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/include/bbcode.php b/include/bbcode.php
index 74dde2fdf..ab928bf12 100644
--- a/include/bbcode.php
+++ b/include/bbcode.php
@@ -1164,7 +1164,7 @@ function bbcode($Text,$preserve_nl = false, $tryoembed = true, $simplehtml = fal
$Text = preg_replace('/\<([^>]*?)(src|href)=(.*?)\&\;(.*?)\>/ism', '<$1$2=$3&$4>', $Text);
// sanitizes src attributes (only relative redir URIs or http URLs)
- $Text = preg_replace('#<([^>]*?)(src)="(?!http|redir)(.*?)"(.*?)>#ism', '<$1$2=""$4 class="invalid-src" title="' . t('Invalid source protocol') . '">', $Text);
+ $Text = preg_replace('#<([^>]*?)(src)="(?!http|redir|cid)(.*?)"(.*?)>#ism', '<$1$2=""$4 class="invalid-src" title="' . t('Invalid source protocol') . '">', $Text);
// sanitize href attributes (only whitelisted protocols URLs)
// default value for backward compatibility