mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-11-29 03:13:40 +01:00
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
19 lines
608 B
Plaintext
Executable File
19 lines
608 B
Plaintext
Executable File
CSS.AllowedProperties
|
|
TYPE: lookup/null
|
|
VERSION: 3.1.0
|
|
DEFAULT: NULL
|
|
--DESCRIPTION--
|
|
|
|
<p>
|
|
If HTML Purifier's style attributes set is unsatisfactory for your needs,
|
|
you can overload it with your own list of tags to allow. Note that this
|
|
method is subtractive: it does its job by taking away from HTML Purifier
|
|
usual feature set, so you cannot add an attribute that HTML Purifier never
|
|
supported in the first place.
|
|
</p>
|
|
<p>
|
|
<strong>Warning:</strong> If another directive conflicts with the
|
|
elements here, <em>that</em> directive will win and override.
|
|
</p>
|
|
--# vim: et sw=4 sts=4
|