mirror of
https://github.com/smarty-php/smarty.git
synced 2026-05-03 19:30:49 +02:00
- bugfix in Smarty_Security 'nl2br' should be a trusted modifier, not PHP function (code.google issue 223)
This commit is contained in:
@@ -108,7 +108,6 @@ class Smarty_Security
|
||||
'count', 'sizeof',
|
||||
'in_array', 'is_array',
|
||||
'time',
|
||||
'nl2br',
|
||||
);
|
||||
/**
|
||||
* This is an array of trusted PHP modifiers.
|
||||
@@ -119,7 +118,8 @@ class Smarty_Security
|
||||
*/
|
||||
public $php_modifiers = array(
|
||||
'escape',
|
||||
'count'
|
||||
'count',
|
||||
'nl2br',
|
||||
);
|
||||
/**
|
||||
* This is an array of allowed tags.
|
||||
|
||||
Reference in New Issue
Block a user