diff --git a/inc/toolbox.class.php b/inc/toolbox.class.php index a8927f27ba..74049982dd 100644 --- a/inc/toolbox.class.php +++ b/inc/toolbox.class.php @@ -489,7 +489,7 @@ function($element) { 'comment' => 1, // 1: remove HTML comments (and do not display their contents) 'cdata' => 1, // 1: remove CDATA sections (and do not display their contents) 'direct_list_nest' => 1, // 1: Allow usage of ul/ol tags nested in other ul/ol tags - 'schemes' => '*: aim, app, feed, file, ftp, gopher, http, https, irc, mailto, news, nntp, sftp, ssh, tel, telnet, notes' + 'safe' => 1, ]; if (!GLPI_ALLOW_IFRAME_IN_RICH_TEXT) { $config['elements'] .= '-iframe'; diff --git a/tests/units/Html.php b/tests/units/Html.php index ae4dfcbe4d..6e0d1b9aec 100644 --- a/tests/units/Html.php +++ b/tests/units/Html.php @@ -175,6 +175,8 @@ public function providerClean() { ['From: Test User ', 'From: Test User test@glpi-project.org', 'From: Test User test@glpi-project.org'], // should be preserved ['Email me @: email@domain.com', 'Email me @: email@domain.com', 'Email me @: email@domain.com'], + // should be preserved + ['Website: http://google.com', 'Website: http://google.com', 'Website: http://google.com'], ]; }