File: 022_warning_about_allow_html.diff

package info (click to toggle)
phpbb2 2.0.21-6
  • links: PTS
  • area: main
  • in suites: etch-m68k
  • size: 4,224 kB
  • ctags: 12
  • sloc: sh: 476; makefile: 108; perl: 29; php: 21
file content (14 lines) | stat: -rw-r--r-- 751 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
diff -ur phpBB2.orig/admin/admin_board.php phpBB2/admin/admin_board.php
--- phpBB2.orig/admin/admin_board.php	2006-06-09 16:29:41.000000000 +0200
+++ phpBB2/admin/admin_board.php	2006-07-03 13:23:09.000000000 +0200
@@ -221,7 +221,9 @@
 	"L_SYSTEM_TIMEZONE" => $lang['System_timezone'],
 	"L_ENABLE_GZIP" => $lang['Enable_gzip'],
 	"L_ENABLE_PRUNE" => $lang['Enable_prune'],
-	"L_ALLOW_HTML" => $lang['Allow_HTML'],
+	"L_ALLOW_HTML" => $lang['Allow_HTML']. " <strong>[Warning: enabling this
+	will always expose your users to cross-site scripting, use only in fully
+	trusted environments]</strong>",
 	"L_ALLOW_BBCODE" => $lang['Allow_BBCode'],
 	"L_ALLOWED_TAGS" => $lang['Allowed_tags'],
 	"L_ALLOWED_TAGS_EXPLAIN" => $lang['Allowed_tags_explain'],