aboutsummaryrefslogtreecommitdiffstats
path: root/includes/Sanitizer.php
Commit message (Expand)AuthorAgeFilesLines
* reverting r109723 because of slush. Daniel Kinzler2012-01-221-23/+1
* Introducing optional support for <a> tags, to be used with microdata resp. RD...Daniel Kinzler2012-01-221-1/+23
* Correct typo in comment, so that it reflects the spec and the actual value inGabriel Wicke2012-01-181-1/+1
* Fix version check version from r105559Sam Reed2011-12-081-2/+6
* Add, update, tweak documentationSam Reed2011-10-261-1/+1
* Fixup some assignments in conditionalsSam Reed2011-10-161-27/+33
* Followup r94465 and r94465; Add phpunit tests for Sanitizer::fixDeprecatedAtt...Daniel Friesen2011-09-251-0/+13
* Followup r94465; Don't use empty.Daniel Friesen2011-09-251-1/+1
* Reverted r85922 and related: new doTableStuff(). I copied in the old doTableS...Tim Starling2011-09-151-1/+1
* Add code to the sanitizer to convert presontational attributes that were remo...Daniel Friesen2011-08-141-2/+86
* This Sanitizer::EVIL_URI_PATTERN is completely inadequate for actual security...Daniel Friesen2011-08-141-0/+8
* added since tagJeroen De Dauw2011-07-251-0/+2
* Followup to r86061: add parser test case to confirm that '&apos' in wikitext ...Brion Vibber2011-06-071-1/+1
* More documentation updates and additionsSam Reed2011-05-211-0/+24
* Add/remove/tweak method documentationSam Reed2011-05-191-1/+1
* Use consistent notation for "@todo FIXME". Should update http://svn.wikimedia...Siebrand Mazeland2011-05-171-1/+1
* Move User::isValidEmailAddr() to Sanitizer. Happy-melon2011-04-181-0/+50
* Allow people to use &apos; entity (sinqle quote character: ') in wikitext.Brian Wolff2011-04-141-0/+2
* (no commit message)Leo Koppelkamm2011-04-121-1/+1
* Fix for bug 28450: escaped CSS commentsTim Starling2011-04-121-12/+33
* HipHop fixes:Tim Starling2011-04-051-1/+5
* The beginnings of HipHop compiled mode support. It works now for parser cache...Tim Starling2011-04-041-329/+327
* Normalize named entities to numericAryeh Gregor2011-03-111-5/+10
* Allow all itemtypes for microdataAryeh Gregor2011-03-111-13/+0
* (Bug 27539) Allow attributes beginning with a digit in wiktext tag parameters.Platonides2011-02-191-1/+1
* Relaxed the allowed format of parser tag attributes as per bug 27539. One sid...Sean Colombo2011-02-191-1/+1
* (bug 27093, CVE-2011-0047): Fixed CSS injection vulnerability. The StringUtil...Tim Starling2011-02-011-0/+7
* * bug 26437: fix for Sanitizer::decodeCharReferences converting invalid hex c...Brion Vibber2010-12-271-6/+1
* Revert r68230, r68231 (mode="grid" on tables) per CR. It's in the history if ...Chad Horohoe2010-12-101-94/+7
* Remove duplicate occurrence of 'u' from $htmlpairsStatic in Sanitizer::remove...Roan Kattouw2010-11-131-1/+1
* Tweak variable name to be camel case (as per feedback on r70849).Sean Colombo2010-10-031-2/+2
* Followup r73880, forgot to give kbd and samp their attribute whitelistsChad Horohoe2010-09-281-2/+2
* More bug 671: whitelist <kbd> and <samp> for user input. Followup per r70164'...Chad Horohoe2010-09-281-1/+2
* Blacklist % in HTML id'sAryeh Gregor2010-08-251-2/+4
* Remove some unused variablesSam Reed2010-08-131-1/+1
* Allow HTML5 custom data attributesAryeh Gregor2010-08-121-2/+3
* As per feedback on r70849, fixed bad indenting (spaces) that should be a tab.Sean Colombo2010-08-111-1/+1
* Fix to #17031. See bug ticket for test code & test-results.Sean Colombo2010-08-111-2/+3
* * Standardised file description headersAlexandre Emsenhuber2010-08-081-1/+1
* Whitelist <dfn> elementAryeh Gregor2010-07-291-2/+2
* Make escapenoentities work again, broken by r68801Aryeh Gregor2010-07-021-2/+1
* When using escapenoentities, decode entitiesAryeh Gregor2010-06-301-1/+1
* (bug 22784) Fix normalization of whitespace in autocomment links Conrad Irwin2010-06-211-0/+12
* let mode="grid" on a wiki table trigger output as div soup instead of a html ...Daniel Kinzler2010-06-181-7/+94
* Remove most named character references from outputAryeh Gregor2010-05-301-1/+1
* Normalise CSS escape sequences.Tim Starling2010-05-281-19/+24
* The pipe | character in urls is now escaped. This solves a parser testPlatonides2010-05-051-1/+1
* Follow up r65286. If we are going to support <img we should support width and...Platonides2010-04-201-1/+1
* Create $wgAllowImageTag to whitelist <img>Aryeh Gregor2010-04-191-2/+9
* Re-normalize titles after html entity decoding when necessary (bug 14952)Conrad Irwin2010-03-281-0/+24