adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-08-07 09:13:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

feature 2899: ability to allow HTML in EXIF/IPTC (disabled by default)

Browse Source 
git-svn-id: http://piwigo.org/svn/branches/2.5@22660 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
plegall
2013-05-14 08:04:33 +00:00
parent 509117aeb9
commit 68c0ce6511
2 changed files with 25 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/config_default.inc.php
+5
View File
@@ -374,6 +374,11 @@ $conf['use_exif_mapping'] = array(
'date_creation' => 'DateTimeOriginal'
);
// allow_html_in_metadata: in case the origin of the photo is unsecure (user
// upload), we remove HTML tags to avoid XSS (malicious execution of
// javascript)
$conf['allow_html_in_metadata'] = false;
// +-----------------------------------------------------------------------+
// | sessions |
// +-----------------------------------------------------------------------+