|
daGrevis
Remove XSS, but don't convert to HTML entitiesMarch 09, 2012 10:10AM |
Is it possible to configure HTML Purifier so it removes XSS, but doesn't convert characters to HTML entities? I need it for Markdown syntax.
Example:
> Quote
Would be (the same, no XSS):
> Quote
But this (or any other input with XSS in it):
> Quote <script>alert(1)</script>
Would be (input with XSS removed):
> Quote
Is HTML Purifier able to do it? :)
|
Re: Remove XSS, but don't convert to HTML entities March 09, 2012 11:20AM |
Admin Registered: 6 years ago Posts: 2,640 |
|
daGrevis
Re: Remove XSS, but don't convert to HTML entitiesMarch 09, 2012 11:26AM |
|
Re: Remove XSS, but don't convert to HTML entities March 09, 2012 12:43PM |
Admin Registered: 6 years ago Posts: 2,640 |
|
daGrevis
Re: Remove XSS, but don't convert to HTML entitiesMarch 09, 2012 12:50PM |
|
Re: Remove XSS, but don't convert to HTML entities March 09, 2012 12:53PM |
Admin Registered: 6 years ago Posts: 2,640 |