Age | Commit message (Expand) | Author |
2008-02-10 | use quotemeta when building the regexp | Joey Hess |
2008-02-10 | Allow the smb: URI scheme. | Josh Triplett |
2008-02-10 | Allow the snews: URI scheme. | Josh Triplett |
2008-02-10 | Do not allow the steam: URI scheme. | Josh Triplett |
2008-02-10 | Match literal '.' in URI schemas containing '.', rather than matching any cha... | Josh Triplett |
2008-02-10 | export $safe_url_regexp | Joey Hess |
2008-02-10 | Also filter the attributes cite, longdesc, and usemap, which can contain URIs | Josh Triplett |
2008-02-10 | add parens around scheme regexp | Joey Hess |
2008-02-10 | Do not allow the about: URI scheme | Josh Triplett |
2008-02-10 | fix data:image handling | Joey Hess |
2008-02-10 | * htmlscrubber security fix: Block javascript in uris. | Joey Hess |
2008-01-07 | * htmlscrubber: Further work around #365971 by adding tags for 'br/', 'hr/' | Joey Hess |
2007-11-18 | * Allow html5 video and audio tags and their attributes in the htmlscrubber. | Joey Hess |
2007-07-11 | on second thought, simple alphanumeric styles are not actually useful (class ... | joey |
2007-07-11 | * Allow simple alphanumeric style attribute values in the htmlscrubber. This | joey |
2007-04-27 | * pagespec_match() has changed to take named parameters, to better allow | joey |
2006-11-08 | * Make sure to check for errors from every eval. | joey |
2006-09-09 | * Work on firming up the plugin interface: | joey |
2006-08-28 | * Change htmlize, format, and sanitize hooks to use named parameters. | joey |
2006-05-25 | * Tell HTML::Scrubber to treat "/" as a valid attribute which is its | joey |
2006-05-05 | * Removed --sanitize and --no-sanitize, replaced with --plugin htmlscrubber | joey |