From 48b31fcc65cf7a25eb97333647c6b971b782ce19 Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Thu, 28 Feb 2008 21:19:54 +0000
Subject: [PATCH] MDL-13705

---
 lib/weblib.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/weblib.php b/lib/weblib.php
index 3a0bb4fd0fc..925cbeefd42 100644
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -1600,6 +1600,7 @@ function cleanAttributes2($htmlArray){
             }
             $arreach['value'] = preg_replace("/j\s*a\s*v\s*a\s*s\s*c\s*r\s*i\s*p\s*t/i", "Xjavascript", $arreach['value']);
             $arreach['value'] = preg_replace("/e\s*x\s*p\s*r\s*e\s*s\s*s\s*i\s*o\s*n/i", "Xexpression", $arreach['value']);
+            $arreach['value'] = preg_replace("/b\s*i\s*n\s*d\s*i\s*n\s*g/i", "Xbinding", $arreach['value']);
         } else if ($arreach['name'] == 'href') {
             //Adobe Acrobat Reader XSS protection
             $arreach['value'] = preg_replace('/(\.(pdf|fdf|xfdf|xdp|xfd))[^a-z0-9_\.\-].*$/i', '$1', $arreach['value']);