SECURITY: Don't use m modifier when checking link prefix
[lhc/web/wiklou.git] / includes / upload / UploadBase.php
index 1185c4d..ba5171f 100644 (file)
@@ -1422,7 +1422,7 @@ abstract class UploadBase {
                                && strpos( $value, '#' ) !== 0
                        ) {
                                if ( !( $strippedElement === 'a'
-                                       && preg_match( '!^https?://!im', $value ) )
+                                       && preg_match( '!^https?://!i', $value ) )
                                ) {
                                        wfDebug( __METHOD__ . ": Found href attribute <$strippedElement "
                                                . "'$attrib'='$value' in uploaded file.\n" );