Page MenuHomePhabricator

D15904.id38304.diff
No OneTemporary

D15904.id38304.diff

diff --git a/src/applications/settings/storage/PhabricatorUserPreferences.php b/src/applications/settings/storage/PhabricatorUserPreferences.php
--- a/src/applications/settings/storage/PhabricatorUserPreferences.php
+++ b/src/applications/settings/storage/PhabricatorUserPreferences.php
@@ -113,7 +113,7 @@
public static function filterMonospacedCSSRule($monospaced) {
// Prevent the user from doing dangerous things.
- return preg_replace('/[^a-z0-9 ,".]+/i', '', $monospaced);
+ return preg_replace('([^a-z0-9 ,"./]+)i', '', $monospaced);
}
}

File Metadata

Mime Type
text/plain
Expires
Sun, Mar 16, 7:56 AM (3 w, 15 h ago)
Storage Engine
blob
Storage Format
Encrypted (AES-256-CBC)
Storage Handle
7224022
Default Alt Text
D15904.id38304.diff (568 B)

Event Timeline