← Back to branch summary

~ubuntu-branches/ubuntu/natty/moin/natty-security

« back to all changes in this revision

Viewing changes to MoinMoin/web/static/htdocs/applets/FCKeditor/editor/dialog/fck_paste.html

  • Committer: Bazaar Package Importer
  • Author(s): Clint Byrum
  • Date: 2010-08-11 12:35:34 UTC
  • mfrom: (0.1.19 sid)
  • Revision ID: james.westby@ubuntu.com-20100811123534-q8zu7qrwqul6cvec
Tags: 1.9.3-1ubuntu1
https://launchpad.net/bugs/586518
* Merge from Debian unstable (LP: #586518). Based on work by Stefan Ebner.
  Remaining changes:
 - Remove python-xml from Suggests field, the package isn't anymore in
   sys.path.
 - Demote fckeditor from Recommends to Suggests; the code was previously
   embedded in moin, but it was also disabled, so there's no reason 
   for us to pull this in by default currently. Note: fckeditor has a
   number of security problems and so this change probably needs to be
   carried indefinitely.

Show diffs side-by-side

added added

removed removed

Lines of Context:
MoinMoin/web/static/htdocs/applets/FCKeditor/editor/dialog/fck_paste.html
1
1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
2
2
<!--
3
3
 * FCKeditor - The text editor for Internet - http://www.fckeditor.net
4
 
 * Copyright (C) 2003-2009 Frederico Caldeira Knabben
 
4
 * Copyright (C) 2003-2010 Frederico Caldeira Knabben
5
5
 *
6
6
 * == BEGIN LICENSE ==
7
7
 *
56
56
                        'javascript:void( (function(){' +
57
57
                                'document.open() ;' +
58
58
                                'document.domain=\'' + document.domain + '\' ;' +
59
 
                                'document.write(\'<html><head><script>window.onerror = function() { return true ; };<\/script><\/head><body><\/body><\/html>\') ;' +
 
59
                                'document.write(\'<html><head><scr' + 'ipt>window.onerror = function() { return true ; };<\/script><\/head><body><\/body><\/html>\') ;' +
60
60
                                'document.close() ;' +
61
61
                                'document.body.contentEditable = true ;' +
62
62
                                'window.focus() ;' +
73
73
                        // Avoid errors if the pasted content has any script that fails: #389
74
74
                        var oDoc = oFrame.contentWindow.document ;
75
75
                        oDoc.open() ;
76
 
                        oDoc.write('<html><head><script>window.onerror = function() { return true ; };<\/script><\/head><body><\/body><\/html>') ;
 
76
                        oDoc.write('<html><head><scr' + 'ipt>window.onerror = function() { return true ; };<\/script><\/head><body><\/body><\/html>') ;
77
77
                        oDoc.close() ;
78
78
 
79
79
                        if ( FCKBrowserInfo.IsIE )
194
194
        html = html.replace( /\s*mso-[^:]+:[^;"]+;?/gi, '' ) ;
195
195
 
196
196
        // Remove margin styles.
197
 
        html = html.replace( /\s*MARGIN: 0cm 0cm 0pt\s*;/gi, '' ) ;
198
 
        html = html.replace( /\s*MARGIN: 0cm 0cm 0pt\s*"/gi, "\"" ) ;
 
197
        html = html.replace( /\s*MARGIN: 0(?:cm|in) 0(?:cm|in) 0pt\s*;/gi, '' ) ;
 
198
        html = html.replace( /\s*MARGIN: 0(?:cm|in) 0(?:cm|in) 0pt\s*"/gi, "\"" ) ;
199
199
 
200
 
        html = html.replace( /\s*TEXT-INDENT: 0cm\s*;/gi, '' ) ;
201
 
        html = html.replace( /\s*TEXT-INDENT: 0cm\s*"/gi, "\"" ) ;
 
200
        html = html.replace( /\s*TEXT-INDENT: 0(?:cm|in)\s*;/gi, '' ) ;
 
201
        html = html.replace( /\s*TEXT-INDENT: 0(?:cm|in)\s*"/gi, "\"" ) ;
202
202
 
203
203
        html = html.replace( /\s*TEXT-ALIGN: [^\s;]+;?"/gi, "\"" ) ;
204
204