mirror of
https://github.com/phpbb/phpbb.git
synced 2025-06-28 22:28:51 +00:00
Merge branch 'ticket/8319' into ticket/8319-develop2
* ticket/8319: [ticket/8319] Do not repeat the replacement [ticket/8319] Add explanation for RELATIVE_URL and update LOCAL_URL [ticket/8319] Update BBCodes that currently use the LOCAL_URL tag on update [ticket/8319] Add new token RELATIVE_URL to allow foreign relative URL parts [ticket/8319] Prepend Board URL to LOCAL_URL links to prevent abuse Conflicts: phpBB/install/database_update.php
This commit is contained in:
commit
34ad665c8b
2 changed files with 13 additions and 4 deletions
|
@ -112,8 +112,8 @@ class acp_bbcodes
|
||||||
{
|
{
|
||||||
$template->assign_block_vars('token', array(
|
$template->assign_block_vars('token', array(
|
||||||
'TOKEN' => '{' . $token . '}',
|
'TOKEN' => '{' . $token . '}',
|
||||||
'EXPLAIN' => $token_explain)
|
'EXPLAIN' => ($token === 'LOCAL_URL') ? sprintf($token_explain, generate_board_url() . '/') : $token_explain,
|
||||||
);
|
));
|
||||||
}
|
}
|
||||||
|
|
||||||
return;
|
return;
|
||||||
|
@ -347,6 +347,9 @@ class acp_bbcodes
|
||||||
'LOCAL_URL' => array(
|
'LOCAL_URL' => array(
|
||||||
'!(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('relative_url')) . ')!e' => "\$this->bbcode_specialchars('$1')"
|
'!(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('relative_url')) . ')!e' => "\$this->bbcode_specialchars('$1')"
|
||||||
),
|
),
|
||||||
|
'RELATIVE_URL' => array(
|
||||||
|
'!(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('relative_url')) . ')!e' => "\$this->bbcode_specialchars('$1')"
|
||||||
|
),
|
||||||
'EMAIL' => array(
|
'EMAIL' => array(
|
||||||
'!(' . get_preg_expression('email') . ')!ie' => "\$this->bbcode_specialchars('$1')"
|
'!(' . get_preg_expression('email') . ')!ie' => "\$this->bbcode_specialchars('$1')"
|
||||||
),
|
),
|
||||||
|
@ -373,6 +376,7 @@ class acp_bbcodes
|
||||||
$sp_tokens = array(
|
$sp_tokens = array(
|
||||||
'URL' => '(?i)((?:' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('url')) . ')|(?:' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('www_url')) . '))(?-i)',
|
'URL' => '(?i)((?:' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('url')) . ')|(?:' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('www_url')) . '))(?-i)',
|
||||||
'LOCAL_URL' => '(?i)(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('relative_url')) . ')(?-i)',
|
'LOCAL_URL' => '(?i)(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('relative_url')) . ')(?-i)',
|
||||||
|
'RELATIVE_URL' => '(?i)(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('relative_url')) . ')(?-i)',
|
||||||
'EMAIL' => '(' . get_preg_expression('email') . ')',
|
'EMAIL' => '(' . get_preg_expression('email') . ')',
|
||||||
'TEXT' => '(.*?)',
|
'TEXT' => '(.*?)',
|
||||||
'SIMPLETEXT' => '([a-zA-Z0-9-+.,_ ]+)',
|
'SIMPLETEXT' => '([a-zA-Z0-9-+.,_ ]+)',
|
||||||
|
@ -429,7 +433,11 @@ class acp_bbcodes
|
||||||
$fp_replace = str_replace($token, $replace, $fp_replace);
|
$fp_replace = str_replace($token, $replace, $fp_replace);
|
||||||
|
|
||||||
$sp_match = str_replace(preg_quote($token, '!'), $sp_tokens[$token_type], $sp_match);
|
$sp_match = str_replace(preg_quote($token, '!'), $sp_tokens[$token_type], $sp_match);
|
||||||
$sp_replace = str_replace($token, '${' . ($n + 1) . '}', $sp_replace);
|
|
||||||
|
// Prepend the board url to local relative links
|
||||||
|
$replace_prepend = ($token_type === 'LOCAL_URL') ? generate_board_url() . '/' : '';
|
||||||
|
|
||||||
|
$sp_replace = str_replace($token, $replace_prepend . '${' . ($n + 1) . '}', $sp_replace);
|
||||||
}
|
}
|
||||||
|
|
||||||
$fp_match = '!' . $fp_match . '!' . $modifiers;
|
$fp_match = '!' . $fp_match . '!' . $modifiers;
|
||||||
|
|
|
@ -83,7 +83,8 @@ $lang = array_merge($lang, array(
|
||||||
'NUMBER' => 'Any series of digits',
|
'NUMBER' => 'Any series of digits',
|
||||||
'EMAIL' => 'A valid email address',
|
'EMAIL' => 'A valid email address',
|
||||||
'URL' => 'A valid URL using any protocol (http, ftp, etc… cannot be used for javascript exploits). If none is given, “http://” is prefixed to the string.',
|
'URL' => 'A valid URL using any protocol (http, ftp, etc… cannot be used for javascript exploits). If none is given, “http://” is prefixed to the string.',
|
||||||
'LOCAL_URL' => 'A local URL. The URL must be relative to the topic page and cannot contain a server name or protocol.',
|
'LOCAL_URL' => 'A local URL. The URL must be relative to the topic page and cannot contain a server name or protocol, as links are prefixed with “%s”',
|
||||||
|
'RELATIVE_URL' => 'A relative URL. You can use this to match parts of a URL, but be careful: a full URL is a valid relative URL. When you want to use relative URLs of your board, use the LOCAL_URL token.',
|
||||||
'COLOR' => 'A HTML colour, can be either in the numeric form <samp>#FF1234</samp> or a <a href="http://www.w3.org/TR/CSS21/syndata.html#value-def-color">CSS colour keyword</a> such as <samp>fuchsia</samp> or <samp>InactiveBorder</samp>'
|
'COLOR' => 'A HTML colour, can be either in the numeric form <samp>#FF1234</samp> or a <a href="http://www.w3.org/TR/CSS21/syndata.html#value-def-color">CSS colour keyword</a> such as <samp>fuchsia</samp> or <samp>InactiveBorder</samp>'
|
||||||
)
|
)
|
||||||
));
|
));
|
||||||
|
|
Loading…
Add table
Reference in a new issue