Relax filter attribute filtering to allow self-referential urls
authorBrian Wolff <bawolff+wn@gmail.com>
Mon, 28 Jul 2014 21:20:30 +0000 (18:20 -0300)
committerBrian Wolff <bawolff+wn@gmail.com>
Tue, 8 Jan 2019 14:37:53 +0000 (14:37 +0000)
commit8c7b635162123ef8328da309b62795d07c17fff6
treec53026d6acab333cf97dbf230fad4faf5a4ceb3c
parentd5fdb669db8086269667a0493ecfdf5062ce3b93
Relax filter attribute filtering to allow self-referential urls

The filter attribute will often have things like filter="url( #foo )"
These local to the file filters in svgs should be fine (We already
disallow non-local xlink:href attributes on <filter> elements). In
fact, users can already do the exact same thing by doing:
style="filter: url( #foo )"

Bug: 67044
Change-Id: Ib25328c160c0d5ea7e01dc84616b76e1b9dcd0eb
includes/upload/UploadBase.php
tests/phpunit/includes/upload/UploadBaseTest.php