X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/9d7375c3b263e77da29a5db22af480db8b99d990..2725887734c318350875501e64561f79b8866dfe:/doc/plugins/htmlscrubber.mdwn?ds=sidebyside diff --git a/doc/plugins/htmlscrubber.mdwn b/doc/plugins/htmlscrubber.mdwn index 252fcd5d2..8e37a5bd5 100644 --- a/doc/plugins/htmlscrubber.mdwn +++ b/doc/plugins/htmlscrubber.mdwn @@ -1,6 +1,5 @@ -[[template id=plugin name=htmlscrubber core=1 included=1 -author="""[[Joey]]"""]] -[[tag type/html type/core]] +[[template id=plugin name=htmlscrubber core=1 author="[[Joey]]"]] +[[tag type/html]] This plugin is enabled by default. It sanitizes the html on pages it renders to avoid XSS attacks and the like. @@ -10,7 +9,7 @@ whitelisted using the same lists as used by Mark Pilgrim's Universal Feed Parser, documented at . Notably it strips `style`, `link`, and the `style` attribute. -It uses the HTML::Scrubber perl module to perform its html +It uses the [[cpan HTML::Scrubber]] perl module to perform its html sanitisation, and this perl module also deals with various entity encoding tricks.