htmlpurifier/library/HTMLPurifier/ConfigSchema/schema/HTML.Forms.txt

HTML.Forms
TYPE: bool
VERSION: 4.13.0
DEFAULT: false
--DESCRIPTION--
<p>
    Whether or not to permit form elements in the user input, regardless of
    %HTML.Trusted value. Please be very careful when using this functionality, as
    enabling forms in untrusted documents may allow for phishing attacks.
</p>
--# vim: et sw=4 sts=4
Add %HTML.Forms config directive (#260) The %HTML.Forms directive enables Forms module regardless of the %HTML.Trusted value. This adds support for form elements without enabling other unsafe modules, such as Scripts, Iframe or Object. To achieve the same effect without this directive one has to explicitly list all enabled modules in %HTML.AllowedModules, and any not listed will be removed. This however is not very convenient, as the allowed modules may vary between doctypes. Resolves #213. 2020-06-29 00:26:33 +00:00			`HTML.Forms`
			`TYPE: bool`
			`VERSION: 4.13.0`
			`DEFAULT: false`
			`--DESCRIPTION--`
			`<p>`
			`Whether or not to permit form elements in the user input, regardless of`
			`%HTML.Trusted value. Please be very careful when using this functionality, as`
			`enabling forms in untrusted documents may allow for phishing attacks.`
			`</p>`
			`--# vim: et sw=4 sts=4`