roundcubemail/program/lib/Roundcube/rcube_washtml.php
private function wash_uri($uri, $blocked_source = false)
    {
        if (($src = $this->config['cid_map'][$uri])
            || ($src = $this->config['cid_map'][$this->config['base_url'].$uri])
        ) {
            return $src;
        }

        // allow url(#id) used in SVG
        if ($uri[0] == '#') {
            return $uri;
        }

        if (preg_match('/^(http|https|ftp):.+/i', $uri)) {
            if ($this->config['allow_remote']) {
                return $uri;
            }

            $this->extlinks = true;
            if ($blocked_source && $this->config['blocked_src']) {
                return $this->config['blocked_src'];
            }
        }
        else if (preg_match('/^data:image.+/i', $uri)) { // RFC2397
            return $uri;
        }
    }
private function wash_uri($uri, $blocked_source = false)
    {
        if (($src = $this->config['cid_map'][$uri])
            || ($src = $this->config['cid_map'][$this->config['base_url'].$uri])
        ) {
            return $src;
        }

        // allow url(#id) used in SVG
        if ($uri[0] == '#') {
            return $uri;
        }

        if (preg_match('/^(http|https|ftp):.+/i', $uri)) {
            if ($this->config['allow_remote']) {
                return $uri;
            }

            $this->extlinks = true;
            if ($blocked_source && $this->config['blocked_src']) {
                return $this->config['blocked_src'];
            }
        }
        else if (preg_match('/^data:image.+/i', $uri)) { // RFC2397
            return $uri;
        }
    }
private function wash_uri ( $ uri , $ blocked_source = false ) { if ( ( $ src = $ this -> config [ 'cid_map' ] [ $ uri ] ) || ( $ src = $ this -> config [ 'cid_map' ] [ $ this -> config [ 'base_url' ] . $ uri ] ) ) { return $ src ; } // allow url(#id) used in SVG if ( $ uri [ 0 ] == '#' ) { return $ uri ; } if ( preg_match ( '/^(http|https|ftp):.+/i' , $ uri ) ) { if ( $ this -> config [ 'allow_remote' ] ) { return $ uri ; } $ this -> extlinks = true ; if ( $ blocked_source && $ this -> config [ 'blocked_src' ] ) { return $ this -> config [ 'blocked_src' ] ; } } else if ( preg_match ( '/^data:image.+/i' , $ uri ) ) { // RFC2397 return $ uri ; } }
Wash URI value
Wash URI value