use quotemeta when building the regexp
authorJoey Hess <joey@kodama.kitenet.net>
Mon, 11 Feb 2008 00:02:12 +0000 (19:02 -0500)
committerJoey Hess <joey@kodama.kitenet.net>
Mon, 11 Feb 2008 00:02:12 +0000 (19:02 -0500)
IkiWiki/Plugin/htmlscrubber.pm

index 329afde26ceda5835bbe17f47536bc16adb5f40f..7ce07ee9abd2a606e69068a182cd05368f9cab7f 100644 (file)
@@ -15,14 +15,14 @@ sub import { #{{{
        # Only known uri schemes are allowed to avoid all the ways of
        # embedding javascrpt.
        # List at http://en.wikipedia.org/wiki/URI_scheme
-       my $uri_schemes=join("|",
+       my $uri_schemes=join("|", map quotemeta,
                # IANA registered schemes
                "http", "https", "ftp", "mailto", "file", "telnet", "gopher",
                "aaa", "aaas", "acap",  "cap", "cid", "crid", 
                "dav", "dict", "dns", "fax", "go", "h323", "im", "imap",
                "ldap", "mid", "news", "nfs", "nntp", "pop", "pres",
                "sip", "sips", "snmp", "tel", "urn", "wais", "xmpp",
-               "z39\.50r", "z39\.50s",
+               "z39.50r", "z39.50s",
                # Selected unofficial schemes
                "aim", "callto", "cvs", "ed2k", "feed", "fish", "gg",
                "irc", "ircs", "lastfm", "ldaps", "magnet", "mms",