Daniel Ziegenberg
be7f6d4834
Prior to this change, all the line endings in the imported HTMLPurifier library were using CRLF (\r\n aka Windows style), but the HTMLPurifier source and also the downloadable artefacts use LF (\n aka Linux style) as line endings. This has been the case since510d190382when with the commit "MDL-38672 import HTML Purifier 4.5.0" all line endings were changed from LF to CRLF. There was no comment in the commit on why this change was done. As the original source uses LF, this commit partly reverts510d190382and goes back to LF as line endings. Signed-off-by: Daniel Ziegenberg <daniel@ziegenberg.at>
19 lines
485 B
Plaintext
19 lines
485 B
Plaintext
URI.AllowedSchemes
|
|
TYPE: lookup
|
|
--DEFAULT--
|
|
array (
|
|
'http' => true,
|
|
'https' => true,
|
|
'mailto' => true,
|
|
'ftp' => true,
|
|
'nntp' => true,
|
|
'news' => true,
|
|
'tel' => true,
|
|
)
|
|
--DESCRIPTION--
|
|
Whitelist that defines the schemes that a URI is allowed to have. This
|
|
prevents XSS attacks from using pseudo-schemes like javascript or mocha.
|
|
There is also support for the <code>data</code> and <code>file</code>
|
|
URI schemes, but they are not enabled by default.
|
|
--# vim: et sw=4 sts=4
|