aboutsummaryrefslogtreecommitdiffstats
path: root/includes/parser/Sanitizer.php
Commit message (Expand)AuthorAgeFilesLines
* Sanitizer::normalizeWhitespace: simplify redundant preg_replaceDavid Causse2025-03-181-1/+1
* Sanitizer::normalizeSectionNameWhitespace: Apply same anti-null fix as 270499bJames D. Forrester2025-03-171-2/+7
* Sanitizer::normalizeWhitespace warn on preg_replace errorDavid Causse2025-03-051-4/+6
* Sanitizer: Reduce temporary variables in stripAllTags()Reedy2025-03-021-4/+1
* Replace call_user_func_array with dynamic function callUmherirrender2025-02-031-1/+1
* Drop empty idsArlo Breault2024-11-011-0/+3
* Hard deprecating wfUrlProtocolsEbrahim Byagowi2024-09-051-2/+4
* build: Use inline ignore for Generic.CodeAnalysis.AssignmentInConditionUmherirrender2024-09-011-0/+1
* Merge "Add a warning to Sanitizer::checkCSS"jenkins-bot2024-06-281-0/+2
|\
| * Add a warning to Sanitizer::checkCSSBrian Wolff2024-06-261-0/+2
* | Sanitizer: delete method removeHTMLtags()Novem Linguae2024-06-271-39/+0
|/
* Sanitizer: Disallow src()Gergő Tisza2024-05-301-0/+1
* Sanitizer: Fix init of static variables and remove outdated commentsFunc2024-04-171-5/+3
* Standardise all our class alias deprecation comments for ease of greppingJames D. Forrester2024-03-191-4/+1
* Allow filter: in inline CSS.Brian Wolff2024-02-131-1/+0
* Update name & email for bvibberBrooke Vibber2024-02-081-1/+1
* Drop deprecated config $wgAllowImageTagAmir Sarabadani2024-01-301-16/+4
* Sanitizer: remove unneeded type documentationDannyS7122024-01-201-69/+0
* Add type declarations to all code in Sanitizer classthiemowmde2024-01-181-57/+57
* Avoid one sprintf() that's not strictly neededthiemowmde2023-12-111-1/+1
* Simplify Sanitizer::CHAR_REFS_REGEX regex a littlethiemowmde2023-12-111-12/+12
* Replace complicated strlen() checks in Sanitizer with is_int()thiemowmde2023-12-041-11/+6
* Autofix spacing around commasDaimona Eaytoy2023-10-251-3/+5
* Improve performance of trivial encoding/decoding regexesthiemowmde2023-10-041-10/+2
* Drop Sanitizer::escapeIdReferenceList(), deprecated since 1.36James D. Forrester2023-09-271-15/+0
* Add first batch of taint-check annotationsDaimona Eaytoy2023-09-231-0/+6
* Namespace Sanitizer under \MediaWiki\ParserJames D. Forrester2023-09-211-8/+18
* Replace some more usages of deprecated MWExceptionDaimona Eaytoy2023-06-091-2/+1
* Sanitizer: Permit the `aria-level` HTML attribute in wikitextMatt Fitzpatrick2023-05-211-0/+1
* Replace internal Hooks::runnerUmherirrender2023-05-111-1/+3
* Protect against long match length in CHAR_REFS_REGEXC. Scott Ananian2022-11-171-0/+16
* Various doc fixes about false and null on method arguments/return typesUmherirrender2022-11-031-1/+1
* Use short array destructuring instead of list()Tim Starling2022-10-211-2/+2
* Sanitizer: Don't consider inline var CSS insecureMichał Turek2022-08-241-1/+0
* Various whitespace changesUmherirrender2022-07-121-3/+3
* Do minor code cleanupMatěj Suchánek2022-06-241-1/+0
* Use str_starts_with/str_ends_withAryeh Gregor2022-05-021-1/+1
* phan: Disable null_casts_as_any_type settingUmherirrender2022-03-211-0/+2
* parser: Fix various scalar types to match documentationUmherirrender2022-03-141-2/+2
* Ensure that the recognizedTagData static cache is properly initializedC. Scott Ananian2022-03-081-1/+1
* Hard deprecate Sanitizer::removeHTMLtags()C. Scott Ananian2022-03-071-5/+44
* Add inline taint information for Sanitizer::remove*Tags()C. Scott Ananian2022-03-071-2/+12
* Add Sanitizer::removeSomeTags() which uses Remex to tokenizeC. Scott Ananian2022-03-041-14/+98
* PHP 8.1: add ENT_COMPAT to some htmlspecialchars() callsTim Starling2022-01-251-2/+2
* Remove or replace usages of "sanity"Reedy2021-11-191-1/+0
* Sanitizer: Replace RFC 3454 by RFC 8264 for clearUrlFomafix2021-08-261-13/+44
* Sanitizer: Use \u{xxxx} syntax in cleanUrlFomafix2021-08-261-13/+13
* Bump wikimedia/remex-html to 2.3.2 and drop 2.3.1C. Scott Ananian2021-08-081-2/+3
* Use array_fill_keys() instead of array_flip() if that reflects the developer'...Tim Starling2021-06-151-5/+8
* Don't p-wrap <aside> tags in extension HTMLMáté Szabó2021-04-061-0/+3