0
0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2024-11-13 00:38:42 +00:00
htmlpurifier/tests/HTMLPurifier/HTMLT
Edward Z. Yang e76f4b45d0 Dramatically rewrite null host URI handling.
Basically, browsers don't parse what should be valid URIs correctly, so
we have to go through some backbends to accomodate them.  Specifically,
for browseable URIs, the following URIs have unintended behavior:

    - ///example.com
    - http:/example.com
    - http:///example.com

Furthermore, if the path begins with //, modifying these URLs must
be done with care, as if you remove the host-name component, the
parse tree changes.

I've modified the engine to follow correct URI semantics as much
as possible while outputting browser compatible code, and invalidate
the URI in cases where we can't deal.  There has been a refactoring
of URIScheme so that this important check is always performed,
introducing a new member variable allow_empty_host which is true
on data, file, mailto and news schemes.

This also fixes bypass bugs on URI.Munge.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
2011-01-25 18:56:46 +00:00
..
allowed-preserve.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
allowed-remove.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
basic.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
blacklist-preserve.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
blacklist-remove.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
css-allowed-preserve.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
css-allowed-remove.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
disable-uri.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
double-youtube.htmlt Fix embedding flash on non-IE browsers and allow more wmode. 2011-01-22 12:28:57 +00:00
empty.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
file-uri.htmlt Add support for file:// URI scheme. 2010-09-09 00:01:26 -04:00
id-default.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
id-enabled.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
id-img.htmlt Fix removal of id with DirectLex by preserving armor. 2010-10-28 17:25:31 +01:00
id-name-mix.htmlt Make name="" and id="" play nicely together. 2009-02-21 02:58:30 -05:00
inline-list-loop.htmlt Fix infinite loop involving wrapping formedness. 2010-05-17 23:22:51 -04:00
inline-wraps-block.htmlt Implement "carryover" functionality, requested by Kinderlehrer <bitweaver@7doves.com> 2008-12-20 13:06:00 -05:00
munge-extra.htmlt Rewrite CSS url() and font-family output logic. 2010-05-31 18:45:21 -07:00
munge.htmlt Dramatically rewrite null host URI handling. 2011-01-25 18:56:46 +00:00
name.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
safe-object-embed-munge.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
safe-object-embed.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
script-bare.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
script-cdata.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
script-comment.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
script-dbl-comment.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
script-ideal.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
secure-munge.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
shift-jis-preserve-yen.htmlt Rewrite CSS url() and font-family output logic. 2010-05-31 18:45:21 -07:00
shift-jis-remove-yen.htmlt Rewrite CSS url() and font-family output logic. 2010-05-31 18:45:21 -07:00
strict-blockquote-with-inline.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
strict-blockquote.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
strict-underline.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00
tidy-background.htmlt Rewrite CSS url() and font-family output logic. 2010-05-31 18:45:21 -07:00
trusted-comments-required.htmlt Style refresh: add/remove vimlines, fix minor factual errors. 2009-04-09 12:47:10 -04:00
trusted-comments-table.htmlt Style refresh: add/remove vimlines, fix minor factual errors. 2009-04-09 12:47:10 -04:00
trusted-comments.htmlt Style refresh: add/remove vimlines, fix minor factual errors. 2009-04-09 12:47:10 -04:00
whitespace-preserve.htmlt Add vim modelines to all files. 2008-12-06 04:24:59 -05:00