(bug 20780) Fix in UploadBase::detectScript: should check for '<a href', not '<a...

diff --git a/includes/upload/UploadBase.php b/includes/upload/UploadBase.php
index 4c96005..3a6b7e5 100644 (file)
--- a/includes/upload/UploadBase.php
+++ b/includes/upload/UploadBase.php
@@ -678,7 +678,7 @@ abstract class UploadBase {
                * when served with a generic content-type.
                */
                $tags = array(
-                       '<a',
+                       '<a href',
                        '<body',
                        '<head',
                        '<html',   #also in safari