Ruleset validation.

HTMLPurifier does not do a good job of validating it's configuration and handling unexpected values gracefully. In some cases, HTMLPurifier can terminate abruptly if its configuration is not set properly.

Would it be possible to provide an API to validate added rules? I didnt see a bug tracker to log the request, so I apologize if this is the wrong place.

Drak

I've not considered this too useful, since usually a programmer will write up a bunch of rules and test it, and if it doesn't work they'll fix their rule. Are you dynamically generating configurations?

We are integrating an interface into Zikula (http://zikula.org) so the rules can be configured via a form (and stored to the database). As such we have no way to validate if the rules will work, they'll just hose the site next pageload because we cannot validate them. IMO, it's the job of the HTMLPurifier not to accept invalid rulesets, so it should both either provide a way to validate rules, or at the very least throw an exception if it breaks so we can catch it.

You should check out HTMLPurifier_Printer_ConfigForm, which was built for this purpose. You could also just try running HTML Purifier with the config they give you, and bugger out if something bad happens.