diff options
Diffstat (limited to 'lib/activityimporter.php')
-rw-r--r-- | lib/activityimporter.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/lib/activityimporter.php b/lib/activityimporter.php index 28c371e4d..4a7678132 100644 --- a/lib/activityimporter.php +++ b/lib/activityimporter.php @@ -189,6 +189,8 @@ class ActivityImporter extends QueueHandler " it's got a different author %s."), $sourceUri, $uri)); } + } else { + throw new ClientException("Not overwriting author info for non-trusted user."); } } @@ -338,8 +340,11 @@ class ActivityImporter extends QueueHandler function purify($content) { + require_once INSTALLDIR.'/extlib/htmLawed/htmLawed.php'; + $config = array('safe' => 1, 'deny_attribute' => 'id,style,on*'); + return htmLawed($content, $config); } } |