From 1f8817ea3b68aacbd25bf34c64cb377b27046fec Mon Sep 17 00:00:00 2001
From: Stefan Ritt <stefan.ritt@psi.ch>
Date: Tue, 23 Oct 2007 18:40:54 +0000
Subject: [PATCH] Tried to add some source protection against JS

SVN revision: 1942
---
 scripts/fckeditor/fckelog.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/scripts/fckeditor/fckelog.js b/scripts/fckeditor/fckelog.js
index d6eed09f..dcebe81d 100644
--- a/scripts/fckeditor/fckelog.js
+++ b/scripts/fckeditor/fckelog.js
@@ -5,6 +5,10 @@
 FCKConfig.PluginsPath = FCKConfig.BasePath.substr(0, FCKConfig.BasePath.length - 7) + 'editor/plugins/';
 FCKConfig.Plugins.Add('elog', null);
 
+FCKConfig.ProtectedSource.Add( /<script[\s\S]*?<\/script>/gi ) ; // <SCRIPT> tags
+FCKConfig.ProtectedSource.Add( /<(.*?)javascript\:(.*?)/gi ) ; // javascript: tags
+FCKConfig.ProtectedSource.Add( /<(.*?)(?:on(blur|c(hange|lick)|dblclick|focus|keypress|(key|mouse)(down|up)|(un)?load|mouse(move|o(ut|ver))|reset|s(elect|ubmit)))=(.*?)(\s*?)(.*?)>/gi ) ; // events
+
 FCKConfig.ToolbarSets["Default"] = [
 	['Source','FitWindow','-','ELOGSubmit','Preview'],
 	['Cut','Copy','Paste','PasteText','PasteWord','-','Print','SpellCheck'],