1 Topic by conner_bw

  • conner_bw
  • Member
  • Offline

Topic: deny_attribute bug in 1.0.7?

Greetings. The documentation says:

Admins, however, may still want to completely deny the 'style' attribute, e.g., with code like

    $processed = htmLawed($text, array('safe'=>1, 'deny_attribute'=>'on*, style'));



However, this doesn't work unless you add a trailing comma:


$processed = htmLawed($text, array('safe'=>1, 'deny_attribute'=>'on*,style,'));

Thanks for an awesome utility!

2 Reply by patnaik

  • patnaik
  • Administrator
  • Offline

Re: deny_attribute bug in 1.0.7?

This was a 'bug' in 1.0.6 and earlier. The value specified for the parameter had to end in a comma, like 'on*, style, id,'. But 1.0.7 onwards that comma is not necessary. Also see this post.

It is possible that you downloaded a temporary 1.0.7 release that was accidentally put up by me for a few minutes on the server (sorry). Please re-download in that case.

3 Reply by conner_bw

  • conner_bw
  • Member
  • Offline

Re: deny_attribute bug in 1.0.7?

Wow, you are right. The version I had did not have the change...

(Diff: http://sux0r.cvs.sourceforge.net/sux0r/sux0r2/includes/symbionts/htmLawed/htmLawed.php?r1=1.1&r2=1.2)

Thanks!