? framework/Text_Filter/run-tests.log
Index: framework/Text_Filter/Filter/xss.php
===================================================================
RCS file: /repository/framework/Text_Filter/Filter/xss.php,v
retrieving revision 1.15
diff -u -r1.15 xss.php
--- framework/Text_Filter/Filter/xss.php	19 Apr 2008 20:12:29 -0000	1.15
+++ framework/Text_Filter/Filter/xss.php	19 Aug 2008 22:03:02 -0000
@@ -96,7 +96,7 @@
         $patterns[$preg] = '\1\8' . $this->_params['replace'];
 
         /* Get all on<foo>="bar()". NEVER allow these. */
-        $patterns['/([\s"\']+' .
+        $patterns['/([\s"\'\/]+' .
                   '(o|&#0*79;?|&#0*4f;?|&#0*111;?|&#0*6f;?)' .
                   '(n|&#0*78;?|&#0*4e;?|&#0*110;?|&#0*6e;?)' .
                   '\w+)[^=a-z0-9"\'>]*=/i'] = '\1' . $this->_params['replace'] . '=';
Index: framework/Text_Filter/tests/xss.phpt
===================================================================
RCS file: /repository/framework/Text_Filter/tests/xss.phpt,v
retrieving revision 1.2
diff -u -r1.2 xss.phpt
--- framework/Text_Filter/tests/xss.phpt	27 Dec 2007 16:43:04 -0000	1.2
+++ framework/Text_Filter/tests/xss.phpt	19 Aug 2008 22:03:02 -0000
@@ -212,6 +212,8 @@
 <XSSCleaned_script />
 xss85.html
 <XSSCleaned_script />PT SRC="http://ha.ckers.org/a.js"><XSSCleaned_tag>
+xss97.html
+<body/onloadXSSCleaned=alert(/xss/)>
 xss98.html
 <XSSCleaned_tagset rows="15,15,15,15,15,15,15,15,15,*">
 <XSSCleaned_tagsrc="mailbox.php?page=1&amp;actionID=delete_messages&amp;targetMbox=&amp;newMbox=0&amp;flag=&amp;indices%5B%5D=199&amp;indices%5B%5D=200&amp;indices%5B%5D=201&amp;indices%5B%5D=202&amp;indices%5B%5D=203&amp;indices%5B%5D=204&amp;indices%5B%5D=205&amp;indices%5B%5D=206&amp;indices%5B%5D=207&amp;indices%5B%5D=208&amp;indices%5B%5D=209&amp;indices%5B%5D=210&amp;indices%5B%5D=211&amp;indices%5B%5D=212&amp;indices%5B%5D=213&amp;indices%5B%5D=214&amp;indices%5B%5D=215&amp;indices%5B%5D=216&amp;indices%5B%5D=217&amp;indices%5B%5D=218&amp;indices%5B%5D=219&amp;indices%5B%5D=220&amp;indices%5B%5D=221&amp;indices%5B%5D=222&amp;indices%5B%5D=223&amp;indices%5B%5D=224&amp;indices%5B%5D=225&amp;indices%5B%5D=226&amp;indices%5B%5D=227&amp;indices%5B%5D=228&amp;indices%5B%5D=229&amp;indices%5B%5D=230&amp;indices%5B%5D=231&amp;indices%5B%5D=232&amp;indices%5B%5D=233&amp;indices%5B%5D=234&amp;indices%5B%5D=235&amp;indices%5B%5D=236&amp;indices%5B%5D=237&amp;indices%5B%5D=238&amp;indices%5B%5D=239&amp;indices%5B%5D=240&amp;indices%5B%5D=241&amp;indices%5B%5D=242&amp;indices%5B%5D=243&amp;indices%5B%5D=244&amp;indices%5B%5D=245&amp;indices%5B%5D=246&amp;indices%5B%5D=247&amp;indices%5B%5D=248&amp;indices%5B%5D=249&amp;indices%5B%5D=250&amp;indices%5B%5D=251&amp;indices%5B%5D=252&amp;indices%5B%5D=253&amp;indices%5B%5D=254&amp;indices%5B%5D=255&amp;indices%5B%5D=256&amp;indices%5B%5D=257&amp;indices%5B%5D=258&amp;indices%5B%5D=259&amp;indices%5B%5D=260&amp;indices%5B%5D=261&amp;indices%5B%5D=262&amp;indices%5B%5D=263&amp;indices%5B%5D=264&amp;indices%5B%5D=265&amp;indices%5B%5D=266&amp;indices%5B%5D=267&amp;indices%5B%5D=268&amp;indices%5B%5D=269&amp;indices%5B%5D=270&amp;indices%5B%5D=271&amp;indices%5B%5D=272&amp;indices%5B%5D=273&amp;indices%5B%5D=274&amp;indices%5B%5D=275&amp;indices%5B%5D=276&amp;indices%5B%5D=277&amp;indices%5B%5D=278&amp;indices%5B%5D=279&amp;indices%5B%5D=280&amp;indices%5B%5D=281&amp;indices%5B%5D=282&amp;indices%5B%5D=283&amp;indices%5B%5D=284&amp;indices%5B%5D=285&amp;indices%5B%5D=286&amp;indices%5B%5D=287&amp;indices%5B%5D=288&amp;indices%5B%5D=289&amp;indices%5B%5D=290&amp;indices%5B%5D=291&amp;indices%5B%5D=292&amp;indices%5B%5D=293&amp;indices%5B%5D=294&amp;indices%5B%5D=295&amp;indices%5B%5D=296&amp;indices%5B%5D=297&amp;indices%5B%5D=298">
Index: framework/Text_Filter/tests/xss97.html
===================================================================
RCS file: framework/Text_Filter/tests/xss97.html
diff -N framework/Text_Filter/tests/xss97.html
--- /dev/null	1 Jan 1970 00:00:00 -0000
+++ framework/Text_Filter/tests/xss97.html	19 Aug 2008 22:03:02 -0000
@@ -0,0 +1 @@
+<body/onload=alert(/xss/)>