Changeset 18

Show
Ignore:
Timestamp:
02/15/06 20:09:44 (3 years ago)
Author:
bradfitz
Message:

[int: security]
don't allow @charset rules
http://rt.livejournal.org/Ticket/Display.html?id=587

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/lib/CSS/Cleaner.pm

    r17 r18  
    6767    $reduced =~ s/\\//g; 
    6868 
    69     if ($reduced =~ /\@import/i) { 
    70         $$ref = "/* suspect CSS: import rule */"; 
     69    if ($reduced =~ /\@(import|charset)/i) { 
     70        my $what = $1; 
     71        $$ref = "/* suspect CSS: $what rule */"; 
    7172        return; 
    7273    }