mirror of
https://github.com/flarum/framework.git
synced 2024-11-23 22:22:28 +08:00
Simple forum software for building great communities.
6cf1dbe648
After a morning of searching, it seems there is no PHP Markdown library that has built-in XSS/sanitization support. The recommended solution is to use HTMLPurifier. This actually works out OK, though, as it’s probably a good idea to enforce sanitization regardless of which formatters are enabled, and to not leave them with the responsibility of sanitization (it’s a big responsibility). Since we cache rendered posts, the slow speed of HTMLPurifier isn’t a concern. Note that HTMLPurifier requires a file to be loaded by Composer, but Studio does not yet support this, so for now I have included it manually. |
||
|---|---|---|
| js | ||
| less | ||
| migrations | ||
| public/fonts | ||
| src | ||
| tests | ||
| views | ||
| .editorconfig | ||
| .gitignore | ||
| .travis.yml | ||
| codeception.yml | ||
| composer.json | ||
| composer.lock | ||
| LICENSE.txt | ||
| README.md | ||
Flarum Core
This repository contains the core code of Flarum. If you want to install Flarum, visit the main Flarum repository.
Contributing
Interested in contributing to Flarum? Read the Contribution Guide!