Fixed issue #9837: Quotes are removed in End URL field

LimeSurvey · Aug 24, 2015 · d2b7fcf · d2b7fcf
1 parent dc0fb88
commit d2b7fcf
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/application/core/LSYii_Validators.php b/application/core/LSYii_Validators.php
@@ -46,10 +46,11 @@ protected function validateAttribute($object,$attribute)
                 $object->$attribute=str_replace('javascript:','',html_entity_decode($object->$attribute, ENT_QUOTES, "UTF-8")); 
             }
         }
+        // Note that URL checking only checks basic URL properties. As a URL can contain EM expression there needs to be a lot of freedom.
         if($this->isUrl)
         {
             if ($object->$attribute== 'http://' || $object->$attribute=='https://') {$object->$attribute="";}
-            $object->$attribute=str_replace(array('"',"'",' ','<','>'),'',html_entity_decode($object->$attribute, ENT_QUOTES, "UTF-8")); // 140219 : Why not urlencode ?
+            $object->$attribute=html_entity_decode($object->$attribute, ENT_QUOTES, "UTF-8"); 
         }
         if($this->isLanguage)
         {