mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-10-13 13:42:59 +02:00
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
26 lines
827 B
Plaintext
Executable File
26 lines
827 B
Plaintext
Executable File
Output.TidyFormat
|
|
TYPE: bool
|
|
VERSION: 1.1.1
|
|
DEFAULT: false
|
|
--DESCRIPTION--
|
|
<p>
|
|
Determines whether or not to run Tidy on the final output for pretty
|
|
formatting reasons, such as indentation and wrap.
|
|
</p>
|
|
<p>
|
|
This can greatly improve readability for editors who are hand-editing
|
|
the HTML, but is by no means necessary as HTML Purifier has already
|
|
fixed all major errors the HTML may have had. Tidy is a non-default
|
|
extension, and this directive will silently fail if Tidy is not
|
|
available.
|
|
</p>
|
|
<p>
|
|
If you are looking to make the overall look of your page's source
|
|
better, I recommend running Tidy on the entire page rather than just
|
|
user-content (after all, the indentation relative to the containing
|
|
blocks will be incorrect).
|
|
</p>
|
|
--ALIASES--
|
|
Core.TidyFormat
|
|
--# vim: et sw=4 sts=4
|