htmlpurifier
htmlpurifier copied to clipboard
Standards compliant HTML filter written in PHP
This is more of a feature request. We're migrating our app from PHP 5.5 => PHP 7+ and are checking if we use incompatible libraries. While running a search for...
Hi @ezyang , I am trying to purify html character entities e.g. < however in latest version v4.10.0, it encounters an error. The error is from the entityParser as key...
XML namespaces/prefixes (`` and `xmlns:namesapace="..."` attribute) are not currently supported. Is support planned?
Attributes are trimmed down by default. I understand this is a desirable behavior in regard to cleaning content, but this doesn't allow for explicitly whitespace-only attributes (e.g. https://www.w3.org/Math/testsuite/mml2-testsuite/Presentation/GeneralLayout/mfenced/mfencedAempty.xml). Is there...
Currently, attribute names are not allowed to have uppercase letters (they are converted to lowercase). This got in the way of the implementation of the MathML `definitionURL` attribute in `csymbol`...
Using PHP 7 the output of `René & Danny` is `Ren&eacute; & Danny` instead of the expected `René & Danny`. It's a specific character combination, you can test it using...
I have the following simplified PHP code, the HTML is coming from an untrusted source, and needs to be purified. This is a minimal example which reproduces the problem, my...
Just like https://github.com/ezyang/htmlpurifier/pull/87 did for 'tel' but for then for the proposed standard 'sip'. Use case: our customer asks to allow the 'sip' protocol so she can make links that...
I have added a whitelist option to htmlpurifer with and wihout a tld `$config->set('HTML.TargetWhitelist', array('domain1.de','domain2.'));` Reason; you can have multiple domains for a single project or trusted(partner) domains. So here...
In some cases the purifier modifies the snippet even though it IS valid registering changes (=errors) in the ErrorCollector. **Example 1:** original snippet: `testlink` purified snippet: `testlink` In the case...