diff options
| author | Michael Foster <savetheinternet@tinyboard.org> | 2013-07-30 16:41:10 -0400 |
|---|---|---|
| committer | Michael Foster <savetheinternet@tinyboard.org> | 2013-07-30 16:41:10 -0400 |
| commit | 461084d400620c32ef262aab1f837573f47b0951 (patch) | |
| tree | c055ed2274cd1492cd952f4bb84886b6a357d2f6 /install.php | |
| parent | 54714595f7ce2cdbd88de1c536e0ddc97ca71529 (diff) | |
MySQL's utf8 charset only supports up to 3-byte symbols. Insterting four byte symbols (U+010000 to U+10FFFF) can be done maliciously to break HTML mark-up.
The ideal solution was to convert to MySQL's utf8mb4 charset, but then we would lose support for MySQL < 5.5.3. In this fix, incompatible characters are encoded as HTML numeric character references (eg. #65536) and just stripped from body_nommarkup.
Diffstat (limited to 'install.php')
0 files changed, 0 insertions, 0 deletions