Merge pull request #336 from openkm/issue/333

Reported XSS vulnerability

Author: monkiki

src/main/java/com/openkm/util/FormatUtil.java

@@ -195,6 +195,9 @@ public static String sanitizeInput(String string) {
 				.replaceAll("(?i)<.*?javascript:.*?>.*?</.*?>", "") // case 2 - Open and close
 				.replaceAll("(?i)<.*?javascript:.*?/>", "") // case 2 - Open / close
 				.replaceAll("(?i)<.*?javascript:.*?>", "") // case 2 - Open and !close
+				.replaceAll("(?i)<.*?javascript&colon;.*?>.*?</.*?>", "") // case 2.5 - Open and close
+				.replaceAll("(?i)<.*?javascript&colon;.*?/>", "") // case 2.5 - Open / close
+				.replaceAll("(?i)<.*?javascript&colon;.*?>", "") // case 2.5 - Open and !close
 				.replaceAll("(?i)<.*?\\s+on.*?>.*?</.*?>", "") // case 3 - Open and close
 				.replaceAll("(?i)<.*?\\s+on.*?/>", "") // case 3 - Open / close
 				.replaceAll("(?i)<.*?\\s+on.*?>", ""); // case 3 - Open and !close