Index: openacs-4/packages/acs-tcl/tcl/text-html-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/text-html-procs.tcl,v diff -u -r1.81 -r1.82 --- openacs-4/packages/acs-tcl/tcl/text-html-procs.tcl 14 May 2018 13:22:24 -0000 1.81 +++ openacs-4/packages/acs-tcl/tcl/text-html-procs.tcl 11 Jun 2018 09:14:55 -0000 1.82 @@ -1258,7 +1258,7 @@ continue } - # 3: check for any attribute that could contain a url + # 3: check for any attribute that could contain a URL # whether this is acceptable switch -- $att { "href" - "src" - "content" - "action" { @@ -1293,7 +1293,7 @@ } } - # regexp is for stuff like 'javascript:' pseudoprotocol, that is not really a url + # regexp is for stuff like 'javascript:' pseudoprotocol, that is not really a URL if {$prot ne "" || [regexp {^(\w+):.*$} $url match prot]} { # check if protocol is allowed if {[info exists unallowed_protocol($prot)] ||