Changeset 11

Timestamp:

02/07/06 17:27:49 (4 years ago)

Author:

bradfitz

Message:

don't allow backslash+hex anywhere. avoid us having to decode it,
then check it.

Files:

• trunk/lib/CSS/Cleaner.pm (modified) (1 diff)

trunk/lib/CSS/Cleaner.pm

@@ -50 +50 @@
     $reduced =~ s/&\#x(\w+);?/chr(hex($1))/eg;
     $reduced =~ s/\s+//g;
+
+    if ($reduced =~ m!\\[a-f0-9]!i) {
+        $$ref = "/* suspect CSS: backslash hex */";
+        return;
+    }
+
     $reduced =~ s/\\//g;