mirrors/htmlpurifier
0
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2025-01-03 05:11:52 +00:00
Code Releases Activity

Remark about bypassing host list with punycode.

Browse Source 
Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
This commit is contained in:
Edward Z. Yang 2012-01-06 05:32:53 -08:00
parent 974fe3f25e
commit 9de0785448
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
library/HTMLPurifier/URIFilter/HostBlacklist.php
View File

@ -1,5 +1,9 @@
<?php <?php
// It's not clear to me whether or not Punycode means that hostnames
// do not have canonical forms anymore. As far as I can tell, it's
// not a problem (punycoding should be identity when no Unicode
// points are involved), but I'm not 100% sure
class HTMLPurifier_URIFilter_HostBlacklist extends HTMLPurifier_URIFilter class HTMLPurifier_URIFilter_HostBlacklist extends HTMLPurifier_URIFilter
{ {
public $name = 'HostBlacklist'; public $name = 'HostBlacklist';