Home Explore Help
Register Sign In
blallo
/
tt-rss
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Browse Source

sanitize: force strip unnecessary data outside of <body>...</body> tags generated by DOMDocument::saveHTML()

Andrew Dolgov 8 years ago
parent
977cea1438
commit
42f78188d0
1 changed files with 8 additions and 1 deletions
Split View Show Diff Stats
  1. 8 1
      include/functions2.php

+ 8 - 1
include/functions2.php
View File 

@@ -1034,7 +1034,14 @@
 
 
 		$res = $doc->saveHTML();
 
 
-		return $res;
 
+		/* strip everything outside of <body>...</body> */
 
+
 
+		$res_frag = array();
 
+		if (preg_match('/<body>(.*)<\/body>/is', $res, $res_frag)) {
 
+			return $res_frag[1];
 
+		} else {
 
+			return $res;
 
+		}
 
 	}
 
 
 	function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {