Prevent XSS between balanced parentheses.

mzsanford · Sep 21, 2010 · c94ba72 · c94ba72
1 parent ea9839c
commit c94ba72
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Twitter/Regex.php b/lib/Twitter/Regex.php
@@ -50,7 +50,7 @@ abstract class Twitter_Regex {
    *
    * @var  string
    */
-  const REGEX_URL_CHARS_PATH = '(?:(?:\([^\)]+\))|@[^\\/]+\\/|[\\.\\,]?[a-z0-9!\\*\';:=\\+\\$\\/%#\\[\\]\\-_,~])';
+  const REGEX_URL_CHARS_PATH = '(?:(?:\([a-z0-9!\\*\';:=\\+\\$\\/%#\\[\\]\\-_,~]+\))|@[^\\/]+\\/|[\\.\\,]?[a-z0-9!\\*\';:=\\+\\$\\/%#\\[\\]\\-_,~])';
 
   /**
    * Expression to match characters that may come at the end of the URL path.