This is due to too paranoid filtering in the regex designed to stop typical XSS attacks.

Comments

omega8cc’s picture

omega8cc commented
Status: Active » Needs review

This commit fixes the issue: http://drupalcode.org/sandbox/omega8cc/1111100.git/commit/3521ea2

anarcat’s picture

anarcat commented
Status: Needs review » Fixed

posted to 1.x and 2.x.

i wish those "security feature" were only part of barracuda so that we wouldn't constantly have to update those... especially since they have no Apache equivalent, it makes Nginx/apache support quite asymetric...

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit f382fb4 on 7.x-2.x, dev-ssl-ip-allocation-refactor, dev-1205458-move_sites_out_of_platforms, 7.x-3.x, dev-subdir-multiserver, 6.x-2.x-backports, dev-helmo-3.x authored by omega8cc, committed by anarcat: 
    Issue #1197182 - fix for Nginx config - allow the alert word in the URL...
  • Commit 69f94f6 on 6.x-1.x, dev-ssl-ip-allocation-refactor, dev-1205458-move_sites_out_of_platforms, 7.x-3.x, dev-subdir-multiserver, 6.x-2.x-backports, dev-helmo-3.x authored by omega8cc, committed by anarcat:
    Issue #1197182 - fix for Nginx config - allow the alert word in the URL...