aboutsummaryrefslogtreecommitdiffstats
path: root/includes/Sanitizer.php
Commit message (Expand)AuthorAgeFilesLines
* SECURITY: Enhance CSS filtering in SVG filescsteipp2014-09-241-17/+34
* Sanitizer::escapeId: Decode entity before replacing spacesumherirrender2014-08-281-2/+3
* Add missing @return to function docsumherirrender2014-08-231-0/+1
* Cleanup some docs (includes/*.php)umherirrender2014-07-241-3/+3
* Merge "Revert "Breaking out disallowed CSS into a global variable""jenkins-bot2014-07-181-8/+12
|\
| * Revert "Breaking out disallowed CSS into a global variable"Krinkle2014-07-181-8/+12
* | Merge "Breaking out disallowed CSS into a global variable"jenkins-bot2014-07-181-12/+8
|\|
| * Breaking out disallowed CSS into a global variableDanielRenfro2014-07-071-12/+8
* | Allow HTML5 <rtc> tag (ruby support for East Asian typography).C. Scott Ananian2014-07-021-3/+3
|/
* Remove isset() check in Sanitizer::setupAttributeWhitelist()Alexandre Emsenhuber2014-06-101-2/+2
* Make phpcs-strict pass on includes/ (2/~10)Siebrand Mazeland2014-05-111-5/+18
* Update parameter documentation for removeHTMLtags()Siebrand Mazeland2014-05-111-1/+1
* Fixed some @params documentation (includes/*)umherirrender2014-04-201-2/+2
* Rename some local vars to start with a lowercase letterumherirrender2014-03-151-2/+2
* Fix spacing between two functionsumherirrender2014-03-151-0/+1
* Put the "else" (or "elseif") on the same line as the previous closing braceAlexandre Emsenhuber2014-03-151-2/+1
* Changing URLs of mediawiki.org in scripts to the SSL-based websiteLadsgroup2014-03-121-1/+1
* SECURITY: Disallow -o-link in stylescsteipp2014-01-131-3/+10
* SECURITY: Don't normalize U+FF3C to \csteipp2014-01-131-1/+1
* Update documentation for SanitizerSiebrand Mazeland2014-01-071-78/+82
* SECURITY: Improve css javascript detectioncsteipp2013-11-141-1/+38
* Put the HTML attribute whitelist closer to HTML5entlinkt2013-10-121-13/+13
* Sanitizer: Remove redundant @private tagsTimo Tijhof2013-09-181-2/+0
* No spaces after (casts)MatmaRex2013-09-041-1/+1
* Merge "Whitelist the <wbr> element."jenkins-bot2013-08-071-2/+5
|\
| * Whitelist the <wbr> element.Daniel Friesen2013-08-021-2/+5
* | Non-word characters don't terminate tag names.C. Scott Ananian2013-08-061-1/+1
* | Code style cleanups to Sanitizer.php.C. Scott Ananian2013-07-301-17/+31
|/
* Fix incorrect escaping of nested <em>, <strong>, <q>, <ruby>, and <bdo>C. Scott Ananian2013-07-101-1/+1
* Followup If21705c2, Shorten remaining urls to the whatwg HTML spec.Daniel Friesen2013-06-081-1/+1
* Shorten our in-comment urls to the whatwg HTML spec.Daniel Friesen2013-06-051-5/+5
* displaytitle: reject some CSS if $wgRestrictDisplayTitle setMatmaRex2013-05-241-24/+41
* Fixed spacing and removed unneeded parenthesisumherirrender2013-05-171-6/+6
* Drop support for XHTML 1.0Daniel Friesen2013-05-151-36/+28
* (bug 41545) Allow kbd, samp, and var to be nested.Daniel Friesen2013-05-131-1/+2
* Fixed spacing around parenthesis in includesumherirrender2013-04-281-1/+1
* Fixed spacing in files direct in includes folderumherirrender2013-04-211-34/+36
* fix some spacingumherirrender2013-03-251-21/+24
* Spellchecked /includes directoryYuri Astrakhan2013-03-131-6/+6
* Fixed @param tags to conform with Doxygen format.Tyler Anthony Romeo2013-03-111-9/+9
* fix some spacingumherirrender2013-03-071-1/+1
* Add a handful of missing @returnReedy2013-02-161-0/+1
* Support WAI-ARIA's role="presentation" inside of WikiText.Daniel Friesen2013-02-121-1/+22
* Merge "remove space before semicolon"IAlex2013-02-101-3/+3
|\
| * remove space before semicolonumherirrender2013-02-091-3/+3
* | fix some spacingumherirrender2013-02-091-5/+5
|/
* fix some spacingumherirrender2013-02-041-10/+10
* fix some spacingumherirrender2013-01-271-2/+2
* (bug 40632) Remove CleanupPresentationalAttributes featureTimo Tijhof2012-11-191-111/+3
* (bug 39067) Add support for HTML5 <mark> element.Daniel Friesen2012-11-191-1/+2