GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR

[eluser]alanees[/eluser]
Hello :-)

i found solution

in file system/core/secutriy.php

at line 606

Code:

$evil_attributes = array('on\w*', 'style', 'xmlns', 'formaction');

clean 'style', >>> be :

Code:

$evil_attributes = array('on\w*', 'xmlns', 'formaction');

and at line 426

Code:

$naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|isindex|layer|link|meta|object|plaintext|style|script|textarea|title|video|xml|xss';

clean style| >>> be

Code:

$naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|isindex|layer|link|meta|object|plaintext|script|textarea|title|video|xml|xss';

Regads