diff --git a/changelog b/changelog index b1925949..b6dd4ea5 100644 --- a/changelog +++ b/changelog @@ -1,3 +1,6 @@ +Sun Oct 20 20:02 2013 CDT + * lib/channel.js: Fix MOTD XSS filter stripping style tags + Sat Oct 19 12:20 2013 CDT * lib/channel.js: Remove some unnecessary packets diff --git a/lib/channel.js b/lib/channel.js index 7078c928..81ff68c8 100644 --- a/lib/channel.js +++ b/lib/channel.js @@ -2139,9 +2139,9 @@ Channel.prototype.trySetJS = function(user, data) { Channel.prototype.updateMotd = function(motd) { var html = motd.replace(/\n/g, "
"); // Temporary fix - html = html.replace("style", "stlye"); + html = html.replace(/style/g, "stlye"); html = sanitize(html).xss(); - html = html.replace("stlye", "style"); + html = html.replace(/stlye/g, "style"); //html = this.filterMessage(html); this.motd = { motd: motd,