From 9038f0941af09f2a2f42e212eec331cdd5a58589 Mon Sep 17 00:00:00 2001
From: Tanguy Pruvot <tanguy.pruvot@gmail.com>
Date: Thu, 21 Jun 2018 17:27:02 +0200
Subject: [PATCH] coindb: avoid html in retrieved icons

---
 web/yaamp/commands/CheckupCommand.php | 2 +-
 web/yaamp/commands/CoindbCommand.php  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/yaamp/commands/CheckupCommand.php b/web/yaamp/commands/CheckupCommand.php
index a7a80c4..87f72b4 100644
--- a/web/yaamp/commands/CheckupCommand.php
+++ b/web/yaamp/commands/CheckupCommand.php
@@ -188,7 +188,7 @@ class CheckupCommand extends CConsoleCommand
 				if (!empty($coin->image)) {
 					if (file_exists($this->basePath.$coin->image)) {
 						$data = file_get_contents($this->basePath.$coin->image);
-						if (strstr($data, "<script ")) {
+						if (strstr($data, "<script") || strstr($data, "<html")) {
 							unlink($this->basePath.$coin->image);
 							$coin->image = NULL;
 							$nbDropped += $coin->save();
diff --git a/web/yaamp/commands/CoindbCommand.php b/web/yaamp/commands/CoindbCommand.php
index a209850..920fbf3 100644
--- a/web/yaamp/commands/CoindbCommand.php
+++ b/web/yaamp/commands/CoindbCommand.php
@@ -441,7 +441,7 @@ class CoindbCommand extends CConsoleCommand
 			} catch (Exception $e) {
 				continue;
 			}
-			if (strlen($data) < 3000 || strstr($data, 'script src')) continue;
+			if (strlen($data) < 3000 || strstr($data, '<script') || strstr($data,'<html')) continue;
 			echo $symbol." icon found\n";
 			file_put_contents($local, $data);
 			if (filesize($local) > 0) {