Allow video source tag work with htmlpurifier #2133

chamilo · Sep 8, 2017 · 1f34a8d · 1f34a8d
1 parent 805b0aa
commit 1f34a8d
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/main/inc/lib/formvalidator/Rule/allowed_tags.inc.php b/main/inc/lib/formvalidator/Rule/allowed_tags.inc.php
@@ -316,6 +316,9 @@
 $allowed_tags_student['video']['controls'] = array();
 $allowed_tags_student['video']['id'] = array();
 
+$allowed_tags_student['source'] = array();
+$allowed_tags_student['source']['type'] = array();
+$allowed_tags_student['source']['src'] = array();
 
 // font
 $allowed_tags_student['font'] = array();

diff --git a/main/inc/lib/security.lib.php b/main/inc/lib/security.lib.php
@@ -380,6 +380,13 @@ public static function remove_XSS($var, $user_status = null, $filter_terms = fal
                         'controls' => 'Bool',
                     )
                 );
+                $def->addElement(
+                    'source',
+                    'Block',
+                    'Flow',
+                    'Common',
+                    array('src' => 'URI', 'type' => 'Text',)
+                );
             }
 
             $purifier[$user_status] = new HTMLPurifier($config);