X-Git-Url: http://git.shiar.nl/minimedit.git/blobdiff_plain/ab3ebc53acde6f060649a01403a886f5485f7bf6..f8527c143033f51fecd929789ef7ad6589c8c2b4:/upload.inc.php
diff --git a/upload.inc.php b/upload.inc.php
index aa24558..86af604 100644
--- a/upload.inc.php
+++ b/upload.inc.php
@@ -1,16 +1,37 @@
admin and preg_match('/\A<[a-z][^>]*>/', $input)) {
+ return $input; # allow html input as is if privileged
+ }
+ $markup = [
+ '{<((?:\w+:|/).+?)>}' => '<$1>', # unescape link entities
+ '{<(?:https?://)?([^>\s|]+)>}' => '<$1 $1>', # unnamed link
+ '{<([^>\s|]+)[\s|]([^>]+)>}' => '$2', # hyperlink
+ "/\r\n?/" => "\n", # unix newlines
+ "/ +\n/" => "
", # trailing spaces for hard line break
+ "/\n/" => "
", # newlines start paragraphs + '/\b_(\w+)_\b/' => '$1', # italic + '/\b\*(\w+)\*\b/' => '$1', # bold + ]; + $html = preg_replace(array_keys($markup), array_values($markup), htmlspecialchars($input)); + return "
$html
"; +}