X-Git-Url: https://sipb.mit.edu/gitweb.cgi/ikiwiki.git/blobdiff_plain/7f1313c0525570bdd8c660f436bf95ef764fad45..8b49304c6721c6c9dad854f5f2793c2116d5da7b:/doc/plugins/htmlscrubber.mdwn diff --git a/doc/plugins/htmlscrubber.mdwn b/doc/plugins/htmlscrubber.mdwn index bc2173890..a064c4901 100644 --- a/doc/plugins/htmlscrubber.mdwn +++ b/doc/plugins/htmlscrubber.mdwn @@ -1,3 +1,7 @@ +[[template id=plugin name=htmlscrubber core=1 included=1 +author="[[Joey]]"]] +[[tag type/html type/core]] + This plugin is enabled by default. It sanitizes the html on pages it renders to avoid XSS attacks and the like. @@ -6,7 +10,7 @@ whitelisted using the same lists as used by Mark Pilgrim's Universal Feed Parser, documented at . Notably it strips `style`, `link`, and the `style` attribute. -It uses the HTML::Scrubber perl module to perform its html +It uses the [[cpan HTML::Scrubber]] perl module to perform its html sanitisation, and this perl module also deals with various entity encoding tricks. @@ -28,5 +32,3 @@ plugin is active: * test * test * test - -[[tag plugins/type/html plugins/type/core]]