pastafarianstvi.cz/libraries/htmlpurifier-4.14.0/docs/enduser-security.txt

19 lines
516 B
Text
Raw Normal View History

2022-11-19 17:30:09 +01:00
Security
Like anything that claims to afford security, HTML_Purifier can be circumvented
through negligence of people. This class will do its job: no more, no less,
and it's up to you to provide it the proper information and proper context
to be effective. Things to remember:
1. Character Encoding: see enduser-utf8.html for more info.
2. IDs: see enduser-id.html for more info
3. URIs: see enduser-uri-filter.html
4. CSS: document pending
Explain which CSS styles we blocked and why.
vim: et sw=4 sts=4