We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 24fedeb commit e75b6deCopy full SHA for e75b6de
system/core/Security.php
@@ -847,7 +847,7 @@ protected function _sanitize_naughty_html($matches)
847
// Each iteration filters a single attribute
848
do
849
{
850
- // Strip any non-alpha characters that may preced an attribute.
+ // Strip any non-alpha characters that may precede an attribute.
851
// Browsers often parse these incorrectly and that has been a
852
// of numerous XSS issues we've had.
853
$matches['attributes'] = preg_replace('#^[^a-z]+#i', '', $matches['attributes']);
0 commit comments