- bugfix in Smarty_Security 'nl2br' should be a trusted modifier, not PHP function (code.google issue 223)

This commit is contained in:
Uwe Tews
2015-05-13 20:17:02 +02:00
parent dea56a2243
commit 8ee805632d
2 changed files with 3 additions and 2 deletions
+2 -2
View File
@@ -108,7 +108,6 @@ class Smarty_Security
'count', 'sizeof',
'in_array', 'is_array',
'time',
'nl2br',
);
/**
* This is an array of trusted PHP modifiers.
@@ -119,7 +118,8 @@ class Smarty_Security
*/
public $php_modifiers = array(
'escape',
'count'
'count',
'nl2br',
);
/**
* This is an array of allowed tags.