htmlpurifier
htmlpurifier copied to clipboard
ezyang
Standards compliant HTML filter written in PHP
We noticed an issue with the html purifier used in SuiteCRM. Cleaning the value of `x true); $baseConfigs['Core.HiddenElements'] = $hidden_tags; $baseConfigs['URI.Base'] = $sugar_config['site_url'] ?? null; $baseConfigs['CSS.Proprietary'] = true; $baseConfigs['HTML.TidyLevel'] =...
Hello, ### Background I am using HTML Purifier to handle URI validation. But I get a problem when using it file `file` protocol. It won't work with my case: `file:\\\Users\thanh-le\Downloads\my-folder`...
It looks like a few fairly popular protocol handlers are being stripped out by purifier. Could URI.AllowedSchemes be extended to allow options for: - sms: - callto: - fax:
The syntax [specified here](https://stackoverflow.design/email/base/mso/) for conditional Outlook CSS does not seem to be compatible with HTMLPurifier, everything inside the conditional comment will be removed. The simplified version of the syntax...
Using the following HTML comment raises the exception below: ```html hi/td> Hi Hi [first_name], Hi Hi Hi: Hi Hi Hi Hi: Hi Hi Hi Hi Hi Hi Hi Hi Hi...
Hi! I have a case with this CSS in an email: ``` p:has(br:only-child) { margin: 0; display: none; } ``` I'm using `$config->set('Filter.ExtractStyleBlocks', true);` The result is: ``` p {...
A site using htmlpurifier as part of a deployable artifact doesn't have access to write to the codebase, but htmlpurifier defaults to writing within the codebase, specifically: ``` Directory .../sites/all/libraries/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer...
### Using the htmlpurifier 4.12 with Drupal 9.5.11. We have a text format configured with the following: Attr: AllowedClasses: null AllowedFrameTargets: "_blank, _self, _parent, _top" AllowedRel: { } AllowedRev: {...
https://github.com/ezyang/htmlpurifier/blob/bbc513d79acf6691fa9cf10f192c90dd2957f18c/library/HTMLPurifier/Token/Tag.php#L47 Hello, When I use HTML Purifier with `Core.LexerImpl = DirectLex`, The PHP error will cause in above line when I purify the below data: `Test` Because the key of...