X-Git-Url: https://git.heureux-cyclage.org/?p=lhc%2Fweb%2Fwiklou.git;a=blobdiff_plain;f=includes%2Fparser%2FSanitizer.php;h=f76e3a9c5d85b18e18487206b992d9fe1c5d06d9;hp=35a59447115774e1ff2b7927e44f35a9d56a5aee;hb=214b37ff07f3fde89430297b2a857750a56ae205;hpb=6a655e0e213337819bbe4619062b9078416724a5

diff --git a/includes/parser/Sanitizer.php b/includes/parser/Sanitizer.php
index 35a5944711..f76e3a9c5d 100644
--- a/includes/parser/Sanitizer.php
+++ b/includes/parser/Sanitizer.php
@@ -1073,6 +1073,7 @@ class Sanitizer {
 				| image\s*\(
 				| image-set\s*\(
 				| attr\s*\([^)]+[\s,]+url
+				| var\s*\(
 			!ix', $value ) ) {
 			return '/* insecure input */';
 		}
@@ -1957,6 +1958,7 @@ class Sanitizer {
 
 			// HTML 5 section 4.5
 			'figure'     => $common,
+			'figure-inline' => $common, # T118520
 			'figcaption' => $common,
 
 			# HTML 5 section 4.6