vichan/inc/lib/htmlpurifier-4.6.0/docs/enduser-security.txt


Security

Like anything that claims to afford security, HTML_Purifier can be circumvented
through negligence of people. This class will do its job: no more, no less,
and it's up to you to provide it the proper information and proper context
to be effective. Things to remember:

1. Character Encoding: see enduser-utf8.html for more info.

2. IDs: see enduser-id.html for more info

3. URIs: see enduser-uri-filter.html

4. CSS: document pending
Explain which CSS styles we blocked and why.

    vim: et sw=4 sts=4
Upgrade HTMLPurifier library 4.5->4.6 2015-02-20 23:16:38 -08:00
			`Security`

			`Like anything that claims to afford security, HTML_Purifier can be circumvented`
			`through negligence of people. This class will do its job: no more, no less,`
			`and it's up to you to provide it the proper information and proper context`
			`to be effective. Things to remember:`

			`1. Character Encoding: see enduser-utf8.html for more info.`

			`2. IDs: see enduser-id.html for more info`

			`3. URIs: see enduser-uri-filter.html`

			`4. CSS: document pending`
			`Explain which CSS styles we blocked and why.`

			`vim: et sw=4 sts=4`