aboutsummaryrefslogtreecommitdiffstats
path: root/includes/parser/Sanitizer.php
Commit message (Expand)AuthorAgeFilesLines
...
* French spacing: don't require non-space before French spacingArlo Breault2021-03-151-3/+2
* Don't worry about something before when armoring french spacesArlo Breault2021-03-011-1/+1
* Don't apply French spacing in raw text elementsArlo Breault2021-02-161-3/+0
* Use static closures where safe to useUmherirrender2021-02-111-3/+3
* Fix some unit tests accessing MediaWikiServicesDaimona Eaytoy2020-11-121-0/+1
* Remove figure-inline from the set of allowed tags in the SanitizerArlo Breault2020-09-111-1/+0
* Merge "Hard-deprecate Sanitizer::escapeIdReferenceList()"jenkins-bot2020-08-211-1/+13
|\
| * Hard-deprecate Sanitizer::escapeIdReferenceList()C. Scott Ananian2020-08-201-1/+13
* | Sanitizer: use RemexHtml entity table, instead of its ownC. Scott Ananian2020-08-211-287/+46
|/
* Sanitizer: Truncate IDs to a reasonable length; deprecate escapeIdReferenceListC. Scott Ananian2020-08-131-0/+5
* Drop Sanitizer::escapeId(), deprecated in MediaWiki 1.30James D. Forrester2020-07-291-53/+5
* Use @internal instead of @private per policydaniel2020-06-261-2/+2
* Introduce wfDeprecatedMsg()Tim Starling2020-06-221-1/+2
* Merge "Hard-deprecate sequential array as parameter to Sanitizer::validateAtt...jenkins-bot2020-06-151-4/+5
|\
| * Hard-deprecate sequential array as parameter to Sanitizer::validateAttributesC. Scott Ananian2020-06-151-4/+5
* | Merge "Use 'list of allowed attributes' in Sanitizer, instead of 'whitelist'"jenkins-bot2020-06-121-22/+22
|\|
| * Use 'list of allowed attributes' in Sanitizer, instead of 'whitelist'C. Scott Ananian2020-06-101-22/+22
* | Hard deprecate $wgAllowImageTag configurationC. Scott Ananian2020-06-101-0/+1
|/
* Remove unnecessary use of black/whitelist in Sanitizer commentsC. Scott Ananian2020-06-101-6/+7
* Hooks::run() call site migrationTim Starling2020-05-301-1/+1
* Use HTML5 semantics for self-closed HTML tags in wikitextC. Scott Ananian2020-05-271-13/+4
* Fix more Squiz.Scope.MethodScope.MissingReedy2020-05-181-27/+27
* Fix even more PSR12.Properties.ConstantVisibility.NotFoundReedy2020-05-161-6/+6
* Fix SingleSpaceBeforeSingleLineCommentReedy2020-05-111-1/+1
* Remove codepaths which ran parser in 'untidy' modeC. Scott Ananian2020-04-131-167/+29
* Allow users to set tabindex="0" on elementsBrian Wolff2020-03-181-0/+6
* Make id attributes not include ascii whitespace per specBrian Wolff2020-02-251-1/+5
* Escape % sign if form valid percent-encoding in fragment identifiersBrian Wolff2020-02-151-2/+19
* Whitelist `aria-hidden` attribute in SanitizerC. Scott Ananian2020-01-281-0/+1
* Merge "Hard-deprecate Sanitizer::escapeId()"jenkins-bot2020-01-261-0/+1
|\
| * Hard-deprecate Sanitizer::escapeId()C. Scott Ananian2020-01-261-0/+1
* | Remove Sanitizer::attributeWhitelist()/setupAttributeWhitelist()C. Scott Ananian2020-01-251-29/+0
|/
* Coding style: Auto-fix MediaWiki.Usage.IsNull.IsNullJames D. Forrester2020-01-101-1/+1
* Remove IE 6 security features from server-side codeTim Starling2019-11-281-38/+0
* Improve efficiency of french-spacing regexpC. Scott Ananian2019-10-251-1/+1
* Convert some private static arrays to constantsMax Semenik2019-10-161-11/+11
* Set @return-taint of Sanitizer::stripAllTags to taintedsbassett2019-08-131-0/+1
* Deprecate Sanitizer::setupAttributeWhitelist/attributeWhitelistC. Scott Ananian2019-06-201-40/+85
* Use [...] instead of array(...) in PHP comments and documentationFomafix2019-06-171-2/+2
* SECURITY: blacklist CSS var()Max Semenik2019-06-061-0/+1
* Allow <figure-inline> attributes through SanitizerC. Scott Ananian2019-04-221-0/+1
* Synchronize allowed attributes for <audio> with Parsoid/TimedMediaHandlerC. Scott Ananian2019-04-221-1/+2
* Collapse some nested if statementsReedy2019-04-041-4/+2
* Sanitizer: remove deprecated parameter to escapeIdReferenceList()Max Semenik2019-02-211-8/+2
* Merge "Quoted attributes don't need to be followed by a space"jenkins-bot2018-11-271-10/+34
|\
| * Quoted attributes don't need to be followed by a spaceArlo Breault2018-11-091-10/+34
* | Hard deprecate codepaths where tidy is disabledC. Scott Ananian2018-11-051-0/+1
|/
* Preserve whitespace in search index text contentErik Bernhardson2018-09-141-3/+3
* Mass conversion of $wgContLang to serviceAryeh Gregor2018-08-111-2/+3
* Merge "Don't armor french spaces before punctuation followed by word characters"jenkins-bot2018-07-131-2/+3
|\