Better regular expression to catch javascript triggers

2003-06-09 05:54:14 +00:00
parent 14f593e176
commit f1c9d90fbb
1 changed files with 1 additions and 1 deletions
@@ -512,7 +512,7 @@ function clean_text($text, $format) {
        case FORMAT_WIKI:
            $text = strip_tags($text, $ALLOWED_TAGS);
            $text = str_ireplace("javascript:", " ", $text);           // Remove javascript: label
-            $text = eregi_replace("([^a-z])on([a-z]+)=", " ", $text);  // Remove javascript triggers
+            $text = eregi_replace("([^a-z])on([a-z]+)([[:space:]]*)=", " ", $text);  // Remove javascript triggers
            return $text;

        case FORMAT_PLAIN: