mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-07-06 09:52:29 +02:00
merge r22660 from branch 2.5 to trunk
feature 2899: ability to allow HTML in EXIF/IPTC (disabled by default) git-svn-id: http://piwigo.org/svn/trunk@22661 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
@@ -374,6 +374,11 @@ $conf['use_exif_mapping'] = array(
|
||||
'date_creation' => 'DateTimeOriginal'
|
||||
);
|
||||
|
||||
// allow_html_in_metadata: in case the origin of the photo is unsecure (user
|
||||
// upload), we remove HTML tags to avoid XSS (malicious execution of
|
||||
// javascript)
|
||||
$conf['allow_html_in_metadata'] = false;
|
||||
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | sessions |
|
||||
// +-----------------------------------------------------------------------+
|
||||
|
||||
Reference in New Issue
Block a user