Skip to content

Commit

Permalink
運営ユーザーが実行できないスクリプトイベントに「onerror」を追加
Browse files Browse the repository at this point in the history
  • Loading branch information
ryuring committed Oct 24, 2024
1 parent 8736983 commit 9db53d4
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion lib/Baser/Model/BcAppModel.php
Original file line number Diff line number Diff line change
Expand Up @@ -1905,7 +1905,7 @@ public function containsScript($check)
{
$events = ['onclick', 'ondblclick', 'onmousedown', 'onmouseup', 'onmouseover', 'onmousemove',
'onmouseout', 'onkeypress', 'onkeydown', 'onkeyup', 'onload', 'onunload',
'onfocus', 'onblur', 'onsubmit', 'onreset', 'onselect', 'onchange'];
'onfocus', 'onblur', 'onsubmit', 'onreset', 'onselect', 'onchange', 'onerror'];
if (BcUtil::isAdminUser() || Configure::read('BcApp.allowedPhpOtherThanAdmins')) {
return true;
}
Expand Down

0 comments on commit 9db53d4

Please sign in to comment.