mirrors/htmlpurifier
0
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2025-01-03 13:21:51 +00:00
Code Releases Activity

[1.2.0] Update new directives file.

Browse Source 
git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@542 48356398-32a2-884e-a903-53898d9a118a
This commit is contained in:
Edward Z. Yang 2006-11-20 03:07:46 +00:00
parent 0960cf6ace
commit a5751c7f20
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/proposal-new-directives.txt
View File

@ -44,15 +44,16 @@ time. Note the naming convention: %Namespace.Directive
%URI.DisableIPHosts - URIs that have IP addresses for hosts are disallowed. %URI.DisableIPHosts - URIs that have IP addresses for hosts are disallowed.
Be sure to also grab unusual encodings (dword, hex and octal), which may Be sure to also grab unusual encodings (dword, hex and octal), which may
be currently be caught by regular DNS be currently be caught by regular DNS
%URI.DisableAbsoluteDNS - Remove extra dots after host names that trigger
absolute DNS. While this is actually the preferred method according to
the RFC, most people opt to use a relative domain name relative to . (root).
%URI.DisableIDN - Disallow raw internationalized domain names. Punycode %URI.DisableIDN - Disallow raw internationalized domain names. Punycode
will still be permitted. will still be permitted.
%URI.ConvertUnusualIPHosts - transform dword/hex/octal IP addresses to the %URI.ConvertUnusualIPHosts - transform dword/hex/octal IP addresses to the
regular form regular form
%URI.ConvertAbsoluteDNS - Remove extra dots after host names that trigger
absolute DNS. While this is actually the preferred method according to
the RFC, most people opt to use a relative domain name relative to . (root).
%URI.DisableExternalResources - disallow resource links (i.e. URIs that result %URI.DisableExternalResources - disallow resource links (i.e. URIs that result
in immediate requests, such as src in IMG) to external websites in immediate requests, such as src in IMG) to external websites
%HTML.DisableImg - disables all images