+[[template id=plugin name=htmlscrubber core=1 included=1
+author="[[Joey]]"]]
+[[tag type/html type/core]]
+
This plugin is enabled by default. It sanitizes the html on pages it renders
to avoid XSS attacks and the like.
* <span style="background: url(javascript:window.location='http://example.org/')">test</span>
* <span style="any: expression(window.location='http://example.org/')">test</span>
* <span style="any: expression(window.location='http://example.org/')">test</span>
-
-[[tag plugins/type/html plugins/type/core]]