]> BookStack Code Mirror - bookstack/commit
Added extra HTML filtering of dangerous content
authorDan Brown <redacted>
Thu, 2 Sep 2021 21:02:30 +0000 (22:02 +0100)
committerDan Brown <redacted>
Thu, 2 Sep 2021 21:02:30 +0000 (22:02 +0100)
commit5e6092aaf8fd420202016038286554860bf8ea64
tree1937121418d5fccf285a9d6a1b623e64d034be78
parent70280253809b1515ed9669bfa8aaec1c5a68d20f
Added extra HTML filtering of dangerous content

In particular, That around the casing of dangerous values within
attributes. This uses some xpath translation to handle different casing
in contains searching.
app/Util/HtmlContentFilter.php
tests/Entity/PageContentTest.php