mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2024-11-09 15:28:40 +00:00
Remark about bypassing host list with punycode.
Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
This commit is contained in:
parent
974fe3f25e
commit
9de0785448
@ -1,5 +1,9 @@
|
||||
<?php
|
||||
|
||||
// It's not clear to me whether or not Punycode means that hostnames
|
||||
// do not have canonical forms anymore. As far as I can tell, it's
|
||||
// not a problem (punycoding should be identity when no Unicode
|
||||
// points are involved), but I'm not 100% sure
|
||||
class HTMLPurifier_URIFilter_HostBlacklist extends HTMLPurifier_URIFilter
|
||||
{
|
||||
public $name = 'HostBlacklist';
|
||||
|
Loading…
Reference in New Issue
Block a user