DefaultSettings.php from MediaWiki 1.3.9:
# Allow limited user-specified HTML in wiki pages? # It will be run through a whitelist for security. # Set this to false if you want wiki pages to consist only of wiki # markup. Note that replacements do not yet exist for all HTML # constructs. $wgUserHtml = true;
Where is this whitelist?
The HTML whitelist is inside the function removeHTMLtags in the file Parser.php.
-- Zigger
On 5/19/05, NSK wrote:
DefaultSettings.php from MediaWiki 1.3.9:
# Allow limited user-specified HTML in wiki pages? # It will be run through a whitelist for security. # Set this to false if you want wiki pages to consist only of wiki # markup. Note that replacements do not yet exist for all HTML # constructs. $wgUserHtml = true;
Where is this whitelist? ...
On Thursday 19 May 2005 16:03, Zigger wrote:
The HTML whitelist is inside the function removeHTMLtags in the file Parser.php.
Could you please make the HTML whitelist configurable via LocalSettings.php (or a web interface if you plan to build any) in a future 1.4 or 1.5 version?
This was also suggested at http://bugzilla.wikimedia.org/show_bug.cgi?id=671 .
-- Zigger
On 5/19/05, NSK wrote:
... Could you please make the HTML whitelist configurable via LocalSettings.php (or a web interface if you plan to build any) in a future 1.4 or 1.5 version? ...
wikitech-l@lists.wikimedia.org