Allowing selected style attributes in htmlawed.

git-svn-id: https://code.elgg.org/elgg/trunk@3383 36083f99-b078-4883-b0ff-0f9b5a30f544

diff --git a/mod/htmlawed/start.php b/mod/htmlawed/start.php
index 1b8351af2f45770d3d91d744108753817c17984f..c4dcb40e4ca4a8139bb54d630f12732bd633c993 100644 (file)
--- a/mod/htmlawed/start.php
+++ b/mod/htmlawed/start.php
@@ -21,8 +21,9 @@
                $CONFIG->htmlawed_config = array(
                        // seems to handle about everything we need.
                        'safe' => true,
-                       'deny_attribute' => 'style',
-                       'schemes' => '*:http,https,ftp,news,mailto,rtsp,teamspeak,gopher,mms,callto'
+                       //'deny_attribute' => 'style',
+                       'schemes' => '*: http,https,ftp,news,mailto,rtsp,teamspeak,gopher,mms,callto;'
+                               . 'style: color,cursor,text-align,font-size,font-weight,font-style,border,margin,padding,float'
                );
                
                register_plugin_hook('validate', 'input', 'htmlawed_filter_tags', 1);