Ticket #6002: 6002.patch

_source/plugins/htmldataprocessor/plugin.js

@@ -333 +333 @@
                 var protectedHtml = [],
                         tempRegex = /<\!--\{cke_temp(comment)?\}(\d*?)-->/g;
 
-                var regexes =
-                        [
-                                // Script tags will also be forced to be protected, otherwise
-                                // IE will execute them.
-                                ( /<script[\s\S]*?<\/script>/gi ),
+                var regexes = protectRegexes;
 
-                                // <noscript> tags (get lost in IE and messed up in FF).
-                                /<noscript[\s\S]*?<\/noscript>/gi
-                        ]
-                        .concat( protectRegexes );
-
                 // First of any other protection, we must protect all comments
                 // to avoid loosing them (of course, IE related).
                 // Note that we use a different tag for comments, as we need to
@@ -409 +400 @@
                 {
                         // The source data is already HTML, but we need to clean
                         // it up and apply the filter.
+                        data = protectSource( data, this.editor.config.defaultProtectedSource.concat( this.editor.config.protectedSource ) );
 
-                        data = protectSource( data, this.editor.config.protectedSource );
-
                         // Before anything, we must protect the URL attributes as the
                         // browser may changing them when setting the innerHTML later in
                         // the code.
@@ -484 +474 @@
  * config.forceSimpleAmpersand = false;
  */
 CKEDITOR.config.forceSimpleAmpersand = false;
+
+/**
+ * Protection regexes for script tags.
+ */
+CKEDITOR.config.defaultProtectedSource = [
+        // Script tags will also be forced to be protected, otherwise
+        // IE will execute them.
+        ( /<script[\s\S]*?<\/script>/gi ),
+
+        // <noscript> tags (get lost in IE and messed up in FF).
+        /<noscript[\s\S]*?<\/noscript>/gi
+];
+ No newline at end of file