egroupware/phpgwapi/inc/htmlpurifier/library/HTMLPurifier/ConfigSchema/schema/URI.AllowedSchemes.txt

URI.AllowedSchemes
TYPE: lookup
--DEFAULT--
array (
  'http' => true,
  'https' => true,
  'mailto' => true,
  'ftp' => true,
  'nntp' => true,
  'news' => true,
)
--DESCRIPTION--
Whitelist that defines the schemes that a URI is allowed to have.  This
prevents XSS attacks from using pseudo-schemes like javascript or mocha.
There is also support for the <code>data</code> URI scheme, but it is not
enabled by default.
--# vim: et sw=4 sts=4
Added HTMLPurifier (http://htmlpurifier.org/) Version 3.3.0 - can be used via html class like: $clean_html = html::purify($html); - using it now in eTemplate to remove malicious code from html: a) when displaying "formatted text" b) when "formatted text" get's input by the user 2009-05-19 19:32:06 +02:00			`URI.AllowedSchemes`
			`TYPE: lookup`
			`--DEFAULT--`
			`array (`
			`'http' => true,`
			`'https' => true,`
			`'mailto' => true,`
			`'ftp' => true,`
			`'nntp' => true,`
			`'news' => true,`
			`)`
			`--DESCRIPTION--`
			`Whitelist that defines the schemes that a URI is allowed to have. This`
			`prevents XSS attacks from using pseudo-schemes like javascript or mocha.`
upgrade htmlpurifier to version 4.1.0 2010-04-27 13:15:35 +02:00			`There is also support for the <code>data</code> URI scheme, but it is not`
			`enabled by default.`
Added HTMLPurifier (http://htmlpurifier.org/) Version 3.3.0 - can be used via html class like: $clean_html = html::purify($html); - using it now in eTemplate to remove malicious code from html: a) when displaying "formatted text" b) when "formatted text" get's input by the user 2009-05-19 19:32:06 +02:00			`--# vim: et sw=4 sts=4`