diff options
author | joshtriplett <joshtriplett@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-03-26 21:39:18 +0000 |
---|---|---|
committer | joshtriplett <joshtriplett@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-03-26 21:39:18 +0000 |
commit | b24394c0ecf954f2fc0ee2e156d19cd6382f8b70 (patch) | |
tree | afee92fab76771f1f8a382665a4224a99ed1e445 | |
parent | a7d595d2106593c1a48f828c14d51cd3782ea29b (diff) |
Note that enabling or disabling the htmlscrubber plugin also affects some other
HTML-related functionality, such as whether [[meta]] allows potentially unsafe
HTML tags.
-rw-r--r-- | doc/plugins/htmlscrubber.mdwn | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/plugins/htmlscrubber.mdwn b/doc/plugins/htmlscrubber.mdwn index 8e37a5bd5..1255d7723 100644 --- a/doc/plugins/htmlscrubber.mdwn +++ b/doc/plugins/htmlscrubber.mdwn @@ -23,6 +23,10 @@ The web's security model is *fundamentally broken*; ikiwiki's html sanitisation is only a patch on the underlying gaping hole that is your web browser. +Note that enabling or disabling the htmlscrubber plugin also affects some other +HTML-related functionality, such as whether [[meta]] allows potentially unsafe +HTML tags. + ---- Some examples of embedded javascript that won't be let through when this |