mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2024-12-23 00:41:52 +00:00
3bdc031224
The %HTML.Forms directive enables Forms module regardless of the %HTML.Trusted value. This adds support for form elements without enabling other unsafe modules, such as Scripts, Iframe or Object. To achieve the same effect without this directive one has to explicitly list all enabled modules in %HTML.AllowedModules, and any not listed will be removed. This however is not very convenient, as the allowed modules may vary between doctypes. Resolves #213.
601 lines
15 KiB
XML
601 lines
15 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<usage>
|
|
<directive id="Core.CollectErrors">
|
|
<file name="HTMLPurifier.php">
|
|
<line>162</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>85</line>
|
|
<line>326</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Lexer/DirectLex.php">
|
|
<line>67</line>
|
|
<line>87</line>
|
|
<line>385</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
|
|
<line>57</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.MaxImgLength">
|
|
<file name="HTMLPurifier/CSSDefinition.php">
|
|
<line>240</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.Proprietary">
|
|
<file name="HTMLPurifier/CSSDefinition.php">
|
|
<line>365</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.AllowTricky">
|
|
<file name="HTMLPurifier/CSSDefinition.php">
|
|
<line>369</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.Trusted">
|
|
<file name="HTMLPurifier/CSSDefinition.php">
|
|
<line>373</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.AllowImportant">
|
|
<file name="HTMLPurifier/CSSDefinition.php">
|
|
<line>377</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.AllowedProperties">
|
|
<file name="HTMLPurifier/CSSDefinition.php">
|
|
<line>506</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.ForbiddenProperties">
|
|
<file name="HTMLPurifier/CSSDefinition.php">
|
|
<line>522</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Cache.DefinitionImpl">
|
|
<file name="HTMLPurifier/DefinitionCacheFactory.php">
|
|
<line>66</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Doctype">
|
|
<file name="HTMLPurifier/DoctypeRegistry.php">
|
|
<line>119</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.CustomDoctype">
|
|
<file name="HTMLPurifier/DoctypeRegistry.php">
|
|
<line>123</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.XHTML">
|
|
<file name="HTMLPurifier/DoctypeRegistry.php">
|
|
<line>128</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Strict">
|
|
<file name="HTMLPurifier/DoctypeRegistry.php">
|
|
<line>133</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.Encoding">
|
|
<file name="HTMLPurifier/Encoder.php">
|
|
<line>380</line>
|
|
<line>428</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Test.ForceNoIconv">
|
|
<file name="HTMLPurifier/Encoder.php">
|
|
<line>388</line>
|
|
<line>439</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.EscapeNonASCIICharacters">
|
|
<file name="HTMLPurifier/Encoder.php">
|
|
<line>429</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Output.CommentScriptContents">
|
|
<file name="HTMLPurifier/Generator.php">
|
|
<line>70</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Output.FixInnerHTML">
|
|
<file name="HTMLPurifier/Generator.php">
|
|
<line>71</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Output.SortAttr">
|
|
<file name="HTMLPurifier/Generator.php">
|
|
<line>72</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Output.FlashCompat">
|
|
<file name="HTMLPurifier/Generator.php">
|
|
<line>73</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Output.TidyFormat">
|
|
<file name="HTMLPurifier/Generator.php">
|
|
<line>104</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.NormalizeNewlines">
|
|
<file name="HTMLPurifier/Generator.php">
|
|
<line>122</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>308</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Output.Newline">
|
|
<file name="HTMLPurifier/Generator.php">
|
|
<line>123</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.BlockWrapper">
|
|
<file name="HTMLPurifier/HTMLDefinition.php">
|
|
<line>263</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Parent">
|
|
<file name="HTMLPurifier/HTMLDefinition.php">
|
|
<line>273</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.AllowedElements">
|
|
<file name="HTMLPurifier/HTMLDefinition.php">
|
|
<line>291</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.AllowedAttributes">
|
|
<file name="HTMLPurifier/HTMLDefinition.php">
|
|
<line>292</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Allowed">
|
|
<file name="HTMLPurifier/HTMLDefinition.php">
|
|
<line>295</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.ForbiddenElements">
|
|
<file name="HTMLPurifier/HTMLDefinition.php">
|
|
<line>399</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.ForbiddenAttributes">
|
|
<file name="HTMLPurifier/HTMLDefinition.php">
|
|
<line>400</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Trusted">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>234</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>313</line>
|
|
<line>353</line>
|
|
</file>
|
|
<file name="HTMLPurifier/HTMLModule/Image.php">
|
|
<line>37</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Lexer/DirectLex.php">
|
|
<line>47</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
|
|
<line>30</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.AllowedModules">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>241</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.CoreModules">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>242</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Proprietary">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>256</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.SafeObject">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>259</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.SafeEmbed">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>262</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.SafeScripting">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>265</line>
|
|
</file>
|
|
<file name="HTMLPurifier/HTMLModule/SafeScripting.php">
|
|
<line>22</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Nofollow">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>268</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.TargetBlank">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>271</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.TargetNoreferrer">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>276</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.TargetNoopener">
|
|
<file name="HTMLPurifier/HTMLModuleManager.php">
|
|
<line>279</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.IDBlacklist">
|
|
<file name="HTMLPurifier/IDAccumulator.php">
|
|
<line>27</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.Language">
|
|
<file name="HTMLPurifier/LanguageFactory.php">
|
|
<line>93</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.LexerImpl">
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>80</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.MaintainLineNumbers">
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>84</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Lexer/DirectLex.php">
|
|
<line>62</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.LegacyEntityDecoder">
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>215</line>
|
|
<line>337</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.ConvertDocumentToFragment">
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>324</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.RemoveProcessingInstructions">
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>347</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.HiddenElements">
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>351</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
|
|
<line>36</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.AggressivelyRemoveScript">
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>352</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.RemoveScriptContents">
|
|
<file name="HTMLPurifier/Lexer.php">
|
|
<line>353</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
|
|
<line>35</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.">
|
|
<file name="HTMLPurifier/URIDefinition.php">
|
|
<line>65</line>
|
|
</file>
|
|
<file name="HTMLPurifier/URIFilter/Munge.php">
|
|
<line>46</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.Host">
|
|
<file name="HTMLPurifier/URIDefinition.php">
|
|
<line>76</line>
|
|
</file>
|
|
<file name="HTMLPurifier/URIScheme.php">
|
|
<line>89</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.Base">
|
|
<file name="HTMLPurifier/URIDefinition.php">
|
|
<line>77</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.DefaultScheme">
|
|
<file name="HTMLPurifier/URIDefinition.php">
|
|
<line>84</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.AllowedSchemes">
|
|
<file name="HTMLPurifier/URISchemeRegistry.php">
|
|
<line>48</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.OverrideAllowedSchemes">
|
|
<file name="HTMLPurifier/URISchemeRegistry.php">
|
|
<line>49</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.AllowDuplicates">
|
|
<file name="HTMLPurifier/AttrDef/CSS.php">
|
|
<line>28</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.Disable">
|
|
<file name="HTMLPurifier/AttrDef/URI.php">
|
|
<line>47</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.ColorKeywords">
|
|
<file name="HTMLPurifier/AttrDef/CSS/Color.php">
|
|
<line>29</line>
|
|
</file>
|
|
<file name="HTMLPurifier/AttrDef/HTML/Color.php">
|
|
<line>19</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="CSS.AllowedFonts">
|
|
<file name="HTMLPurifier/AttrDef/CSS/FontFamily.php">
|
|
<line>64</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.AllowedClasses">
|
|
<file name="HTMLPurifier/AttrDef/HTML/Class.php">
|
|
<line>33</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.ForbiddenClasses">
|
|
<file name="HTMLPurifier/AttrDef/HTML/Class.php">
|
|
<line>34</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.AllowedFrameTargets">
|
|
<file name="HTMLPurifier/AttrDef/HTML/FrameTarget.php">
|
|
<line>32</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.EnableID">
|
|
<file name="HTMLPurifier/AttrDef/HTML/ID.php">
|
|
<line>41</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.IDPrefix">
|
|
<file name="HTMLPurifier/AttrDef/HTML/ID.php">
|
|
<line>51</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.IDPrefixLocal">
|
|
<file name="HTMLPurifier/AttrDef/HTML/ID.php">
|
|
<line>53</line>
|
|
<line>58</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.ID.HTML5">
|
|
<file name="HTMLPurifier/AttrDef/HTML/ID.php">
|
|
<line>75</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.IDBlacklistRegexp">
|
|
<file name="HTMLPurifier/AttrDef/HTML/ID.php">
|
|
<line>97</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.">
|
|
<file name="HTMLPurifier/AttrDef/HTML/LinkTypes.php">
|
|
<line>46</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.AllowHostnameUnderscore">
|
|
<file name="HTMLPurifier/AttrDef/URI/Host.php">
|
|
<line>77</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.EnableIDNA">
|
|
<file name="HTMLPurifier/AttrDef/URI/Host.php">
|
|
<line>109</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.DefaultTextDir">
|
|
<file name="HTMLPurifier/AttrTransform/BdoDir.php">
|
|
<line>22</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.RemoveInvalidImg">
|
|
<file name="HTMLPurifier/AttrTransform/ImgRequired.php">
|
|
<line>24</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
|
|
<line>27</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.DefaultInvalidImage">
|
|
<file name="HTMLPurifier/AttrTransform/ImgRequired.php">
|
|
<line>27</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.DefaultImageAlt">
|
|
<file name="HTMLPurifier/AttrTransform/ImgRequired.php">
|
|
<line>33</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Attr.DefaultInvalidImageAlt">
|
|
<file name="HTMLPurifier/AttrTransform/ImgRequired.php">
|
|
<line>40</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Attr.Name.UseCDATA">
|
|
<file name="HTMLPurifier/AttrTransform/Name.php">
|
|
<line>18</line>
|
|
</file>
|
|
<file name="HTMLPurifier/HTMLModule/Name.php">
|
|
<line>19</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.FlashAllowFullScreen">
|
|
<file name="HTMLPurifier/AttrTransform/SafeParam.php">
|
|
<line>53</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Cache.SerializerPath">
|
|
<file name="HTMLPurifier/DefinitionCache/Serializer.php">
|
|
<line>185</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Cache.SerializerPermissions">
|
|
<file name="HTMLPurifier/DefinitionCache/Serializer.php">
|
|
<line>202</line>
|
|
<line>218</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Filter.ExtractStyleBlocks.TidyImpl">
|
|
<file name="HTMLPurifier/Filter/ExtractStyleBlocks.php">
|
|
<line>94</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Filter.ExtractStyleBlocks.Scope">
|
|
<file name="HTMLPurifier/Filter/ExtractStyleBlocks.php">
|
|
<line>125</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Filter.ExtractStyleBlocks.Escaping">
|
|
<file name="HTMLPurifier/Filter/ExtractStyleBlocks.php">
|
|
<line>330</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.Forms">
|
|
<file name="HTMLPurifier/HTMLModule/Forms.php">
|
|
<line>31</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.SafeIframe">
|
|
<file name="HTMLPurifier/HTMLModule/Iframe.php">
|
|
<line>28</line>
|
|
</file>
|
|
<file name="HTMLPurifier/URIFilter/SafeIframe.php">
|
|
<line>48</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.MaxImgLength">
|
|
<file name="HTMLPurifier/HTMLModule/Image.php">
|
|
<line>21</line>
|
|
</file>
|
|
<file name="HTMLPurifier/HTMLModule/SafeEmbed.php">
|
|
<line>18</line>
|
|
</file>
|
|
<file name="HTMLPurifier/HTMLModule/SafeObject.php">
|
|
<line>24</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.TidyLevel">
|
|
<file name="HTMLPurifier/HTMLModule/Tidy.php">
|
|
<line>50</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.TidyAdd">
|
|
<file name="HTMLPurifier/HTMLModule/Tidy.php">
|
|
<line>54</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.TidyRemove">
|
|
<file name="HTMLPurifier/HTMLModule/Tidy.php">
|
|
<line>55</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="AutoFormat.PurifierLinkify.DocURL">
|
|
<file name="HTMLPurifier/Injector/PurifierLinkify.php">
|
|
<line>31</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="AutoFormat.RemoveEmpty.RemoveNbsp">
|
|
<file name="HTMLPurifier/Injector/RemoveEmpty.php">
|
|
<line>46</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="AutoFormat.RemoveEmpty.RemoveNbsp.Exceptions">
|
|
<file name="HTMLPurifier/Injector/RemoveEmpty.php">
|
|
<line>47</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="AutoFormat.RemoveEmpty.Predicate">
|
|
<file name="HTMLPurifier/Injector/RemoveEmpty.php">
|
|
<line>48</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.AggressivelyFixLt">
|
|
<file name="HTMLPurifier/Lexer/DOMLex.php">
|
|
<line>54</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.AllowParseManyTags">
|
|
<file name="HTMLPurifier/Lexer/DOMLex.php">
|
|
<line>72</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.DirectLexLineNumberSyncInterval">
|
|
<file name="HTMLPurifier/Lexer/DirectLex.php">
|
|
<line>84</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.DisableExcludes">
|
|
<file name="HTMLPurifier/Strategy/FixNesting.php">
|
|
<line>54</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="Core.EscapeInvalidTags">
|
|
<file name="HTMLPurifier/Strategy/MakeWellFormed.php">
|
|
<line>72</line>
|
|
</file>
|
|
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
|
|
<line>26</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.AllowedComments">
|
|
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
|
|
<line>31</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="HTML.AllowedCommentsRegexp">
|
|
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
|
|
<line>32</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.HostBlacklist">
|
|
<file name="HTMLPurifier/URIFilter/HostBlacklist.php">
|
|
<line>25</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.MungeResources">
|
|
<file name="HTMLPurifier/URIFilter/Munge.php">
|
|
<line>48</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.MungeSecretKey">
|
|
<file name="HTMLPurifier/URIFilter/Munge.php">
|
|
<line>49</line>
|
|
</file>
|
|
</directive>
|
|
<directive id="URI.SafeIframeRegexp">
|
|
<file name="HTMLPurifier/URIFilter/SafeIframe.php">
|
|
<line>35</line>
|
|
</file>
|
|
</directive>
|
|
</usage>
|