forked from extern/egroupware
8f797be836
- can be used via html class like:
$clean_html = html::purify($html);
- using it now in eTemplate to remove malicious code from html:
a) when displaying "formatted text"
b) when "formatted text" get's input by the user
15 lines
520 B
Plaintext
Executable File
15 lines
520 B
Plaintext
Executable File
HTML.SafeObject
|
|
TYPE: bool
|
|
VERSION: 3.1.1
|
|
DEFAULT: false
|
|
--DESCRIPTION--
|
|
<p>
|
|
Whether or not to permit object tags in documents, with a number of extra
|
|
security features added to prevent script execution. This is similar to
|
|
what websites like MySpace do to object tags. You may also want to
|
|
enable %HTML.SafeEmbed for maximum interoperability with Internet Explorer,
|
|
although embed tags will cause your website to stop validating.
|
|
<strong>Highly experimental.</strong>
|
|
</p>
|
|
--# vim: et sw=4 sts=4
|