From 1a03ede2b46a2ca9160cdd702c7488e2aae7a1f8 Mon Sep 17 00:00:00 2001
From: Nate Coraor <nate@bx.psu.edu>
Date: Wed, 30 Sep 2009 09:22:02 -0400
Subject: [PATCH] Prevent script tags in uploads as reported by Mitsuteru Nakao

---
 tools/data_source/upload.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tools/data_source/upload.py b/tools/data_source/upload.py
index 8b14d5cfd95..b06c320a214 100644
--- a/tools/data_source/upload.py
+++ b/tools/data_source/upload.py
@@ -49,10 +49,11 @@ def check_html( temp_name, chunk=None ):
     regexp2 = re.compile( "<IFRAME[^>]*>", re.I )
     regexp3 = re.compile( "<FRAMESET[^>]*>", re.I )
     regexp4 = re.compile( "<META[^>]*>", re.I )
+    regexp5 = re.compile( "<SCRIPT[^>]*>", re.I )
     lineno = 0
     for line in temp:
         lineno += 1
-        matches = regexp1.search( line ) or regexp2.search( line ) or regexp3.search( line ) or regexp4.search( line )
+        matches = regexp1.search( line ) or regexp2.search( line ) or regexp3.search( line ) or regexp4.search( line ) or regexp5.search( line )
         if matches:
             if chunk is None:
                 temp.close()