mirrors/htmlpurifier
0
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2024-09-19 10:45:18 +00:00
Code Releases Activity
Standards compliant HTML filter written in PHP. http://htmlpurifier.org
1,325 Commits 5 Branches 65 Tags 9.1 MiB
PHP 94.5%
HTML 4.6%
XSLT 0.5%
CSS 0.3%
JavaScript 0.1%
4d612d5a77
Go to file
Edward Z. Yang 4d612d5a77 Improve handling of malformed object parameters. 
When specifying source material for <object> tags, you must use
data inside the object tag as well as specify movie in a param.
If you specify a src (which is the appropriate markup for <embed>)
we now convert and fill in the other attributes appropriately.

Also, fix a PHP warning in Generator code.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
2010-03-09 17:29:38 -05:00
art [2.0.1] Implement haphazard error collection for AttrValidator. 2007-06-27 02:03:15 +00:00
benchmarks Style refresh: add/remove vimlines, fix minor factual errors. 2009-04-09 12:47:10 -04:00
configdoc Implement Internet Explorer compatibility code for embedded content. 2010-03-08 01:56:40 -05:00
docs XHTML 2 is dead. Long live XHTML 2. 2009-07-02 15:43:42 -04:00
extras Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
library Improve handling of malformed object parameters. 2010-03-09 17:29:38 -05:00
maintenance Add doxygen doc scripts, and fix package.php 2009-07-08 22:11:15 -04:00
plugins Release Phorum module 4.0.0. 2009-07-09 21:12:35 -04:00
smoketests Improve handling of malformed object parameters. 2010-03-09 17:29:38 -05:00
tests Support flashvars. 2010-03-08 01:16:57 -05:00
.gitattributes Add Git specific files and configuration 2008-06-24 22:02:16 -04:00
.gitignore Add docs and facilities for having separate directories of schemas. 2009-05-29 22:16:35 -04:00
CREDITS Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
Doxyfile Release 4.0.0. 2009-07-07 22:41:01 -04:00
FOCUS Release 4.0.0. 2009-07-07 22:41:01 -04:00
INSTALL Update documentation to new configuration format. 2009-05-29 23:46:40 -04:00
INSTALL.fr.utf8 Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
LICENSE Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
NEWS Implement Internet Explorer compatibility code for embedded content. 2010-03-08 01:56:40 -05:00
package.php Add doxygen doc scripts, and fix package.php 2009-07-08 22:11:15 -04:00
phpdoc.ini Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
README Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
release1-update.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
release2-tag.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
test-settings.sample.php Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
TODO Improve handling of malformed object parameters. 2010-03-09 17:29:38 -05:00
VERSION Release 4.0.0. 2009-07-07 22:41:01 -04:00
WHATSNEW Release 4.0.0. 2009-07-07 22:41:01 -04:00
WYSIWYG Add vim modelines to all files. 2008-12-06 04:24:59 -05:00

README 

README
    All about HTML Purifier

HTML Purifier is an HTML filtering solution that uses a unique combination
of robust whitelists and agressive parsing to ensure that not only are
XSS attacks thwarted, but the resulting HTML is standards compliant.

HTML Purifier is oriented towards richly formatted documents from
untrusted sources that require CSS and a full tag-set.  This library can
be configured to accept a more restrictive set of tags, but it won't be
as efficient as more bare-bones parsers. It will, however, do the job
right, which may be more important.

Places to go:

* See INSTALL for a quick installation guide
* See docs/ for developer-oriented documentation, code examples and
  an in-depth installation guide.
* See WYSIWYG for information on editors like TinyMCE and FCKeditor

HTML Purifier can be found on the web at: http://htmlpurifier.org/

    vim: et sw=4 sts=4