Tim Almdal
54ffea2419
Split the clean method into two clean and purify. clean is a light weight
...
approach using html::specialchars and purify uses HTMLPurifier to intelligently
cleanse the output fields. Use purifier for text and title fields where it is
likely that a user would enter html to format their data.
2009-07-03 21:44:10 -07:00
Tim Almdal
f6d847739a
Update the source so the third party code passes the File Structure Test
2009-07-03 14:18:45 -07:00
Tim Almdal
8d5900f639
Fix for ticket #400 : Add HTMLPurifier to gallery3 and change p::clean() to call HTMLPurifier->purify()
2009-07-03 12:56:59 -07:00
Tim Almdal
b6e5bf6eaa
Fix for ticket #400 : Add HTMLPurifier to gallery3 and change p::clean() to call HTMLPurifier->purify()
2009-07-03 12:56:29 -07:00
Tim Almdal
d8eca7682d
make cleanm static
2009-06-02 12:41:59 -07:00
Bharat Mediratta
f9a741782d
Switch to using html::specialchars() for cleaning.
2009-05-31 12:33:10 -07:00
Bharat Mediratta
ad81861c33
First pass at an XSS security test, along with the "p" helper which
...
can clean HTML output.
2009-05-31 00:11:02 -07:00
Tim Almdal
Bharat Mediratta