← All changes | back/Helpers/SecurityHelper.php +93 -1 11.0.4 → 11.1.0 View file →

		@@ -21,9 +21,8 @@
21	21	'value' => true,
22	22	'class' => true,
23	23	'data-open' => true,
24	24	'readonly' => true,
25		- 'data-acym-translate' => true,
26	25	'data-rs' => true,
27	26	'onchange' => true,
28	27	'data-reveal' => true,
29	28	'data-reveal-larger' => true,
		@@ -64,8 +63,10 @@
64	63	'href' => true,
65	64	'target' => true,
66	65	'title' => true,
67	66	'class' => true,
	67	+ 'rel' => true,
	68	+ 'aria-label' => true,
68	69	'data-acym-modal' => true,
69	70	],
70	71	'div' => [
71	72	'class' => true,
		@@ -105,7 +106,98 @@
105	106	'class' => true,
106	107	],
107	108	'span' => [
108	109	'class' => true,
	110	+ ],
	111	+ ];
	112	+
	113	+ const ALLOWED_HTML_NOTIFICATION = [
	114	+ 'a' => [
	115	+ 'href' => true,
	116	+ 'target' => true,
	117	+ 'id' => true,
	118	+ 'class' => true,
	119	+ 'title' => true,
	120	+ ],
	121	+ 'b' => [],
	122	+ 'br' => [],
	123	+ 'i' => [],
	124	+ 'p' => [
	125	+ 'class' => true,
	126	+ 'title' => true,
	127	+ ],
	128	+ 'pre' => [],
	129	+ 'strong' => [],
	130	+ ];
	131	+
	132	+ const ALLOWED_HTML_MESSAGE = [
	133	+ 'a' => [
	134	+ 'href' => true,
	135	+ 'target' => true,
	136	+ 'id' => true,
	137	+ 'class' => true,
	138	+ 'title' => true,
	139	+ ],
	140	+ 'b' => [],
	141	+ 'br' => [],
	142	+ 'div' => [
	143	+ 'class' => true,
	144	+ ],
	145	+ 'i' => [],
	146	+ 'li' => [],
	147	+ 'p' => [
	148	+ 'class' => true,
	149	+ 'title' => true,
	150	+ ],
	151	+ 'pre' => [],
	152	+ 'span' => [
	153	+ 'class' => true,
	154	+ 'data-acym-email-id' => true,
	155	+ ],
	156	+ 'strong' => [],
	157	+ 'ul' => [],
	158	+ ];
	159	+
	160	+ const ALLOWED_HTML_CHECKBOX_LABEL = [
	161	+ 'div' => [
	162	+ 'class' => true,
	163	+ ],
	164	+ 'span' => [
	165	+ 'class' => true,
	166	+ ],
	167	+ 'input' => [
	168	+ 'class' => true,
	169	+ 'type' => true,
	170	+ 'name' => true,
	171	+ 'value' => true,
	172	+ ],
	173	+ 'select' => [
	174	+ 'class' => true,
	175	+ 'name' => true,
	176	+ 'id' => true,
	177	+ ],
	178	+ 'option' => [
	179	+ 'value' => true,
	180	+ 'selected' => true,
	181	+ 'disabled' => true,
	182	+ ],
	183	+ ];
	184	+
	185	+ const ALLOWED_HTML_PARAM_FIELD = [
	186	+ 'input' => [
	187	+ 'type' => true,
	188	+ 'name' => true,
	189	+ 'value' => true,
	190	+ ],
	191	+ 'select' => [
	192	+ 'class' => true,
	193	+ 'id' => true,
	194	+ 'name' => true,
	195	+ 'multiple' => true,
	196	+ ],
	197	+ 'option' => [
	198	+ 'value' => true,
	199	+ 'selected' => true,
	200	+ 'disabled' => true,
109	201	],
110	202	];
111	203	}