forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
13 lines
314 B
Plaintext
Executable File
13 lines
314 B
Plaintext
Executable File
HTML.Parent
|
|
TYPE: string
|
|
VERSION: 1.3.0
|
|
DEFAULT: 'div'
|
|
--DESCRIPTION--
|
|
|
|
<p>
|
|
String name of element that HTML fragment passed to library will be
|
|
inserted in. An interesting variation would be using span as the
|
|
parent element, meaning that only inline tags would be allowed.
|
|
</p>
|
|
--# vim: et sw=4 sts=4
|