contao/core — pull request #3 by fbender (2011-11-26 17:49:00+00:00)
Title: Fix: do not alter data: URIs

The StyleSheet generator adds `../../` to external resources, e. g. `background-image:url("…");`. This makes it impossible to use [data: URIs](https://developer.mozilla.org/en/data_URIs). Thus, I added some additional checks.

Additionally, I fixed the improper handling (or lack thereof) of special chars arising from Contao's secure input handling. Formerly, it was impossbile to use resource URLs like `image.php?id=25e34f`, MS Windows-style file paths or data: URIs with the base64 padding character (`=`)*.

(*) According to the RFC 2397, `=` should be encoded as `%3D` in data: URIs, but it works in the major browsers without encoding, and not URL-encoding the value of `url()` is needed for the first example provided.