Escape story fields and clean story HTML with HTML Purifier.
Add HTML Purifier 4.19.1. Stories are purified when they are saved and when they are shown.
This commit is contained in:
+9
@@ -0,0 +1,9 @@
|
||||
URI.OverrideAllowedSchemes
|
||||
TYPE: bool
|
||||
DEFAULT: true
|
||||
--DESCRIPTION--
|
||||
If this is set to true (which it is by default), you can override
|
||||
%URI.AllowedSchemes by simply registering a HTMLPurifier_URIScheme to the
|
||||
registry. If false, you will also have to update that directive in order
|
||||
to add more schemes.
|
||||
--# vim: et sw=4 sts=4
|
||||
Reference in New Issue
Block a user