From 54ca645e2cbf0c9f2676f40f86840de5acc7f17b Mon Sep 17 00:00:00 2001 From: Thomas Marstrander Date: Sun, 6 Mar 2016 11:42:24 +0100 Subject: [PATCH] Whitelisted originalImage attribute when filtering params. HFJ-1645 --- h5p.classes.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/h5p.classes.php b/h5p.classes.php index c8662a1..93534f2 100644 --- a/h5p.classes.php +++ b/h5p.classes.php @@ -2906,7 +2906,7 @@ class H5PContentValidator { // Remove attributes that should not exist, they may contain JSON escape // code. - $validkeys = array_merge(array('path', 'mime', 'copyright'), $typevalidkeys); + $validkeys = array_merge(array('path', 'mime', 'copyright', 'originalImage'), $typevalidkeys); if (isset($semantics->extraAttributes)) { $validkeys = array_merge($validkeys, $semantics->extraAttributes); // TODO: Validate extraAttributes }