mirror of
https://github.com/flarum/framework.git
synced 2024-11-24 00:30:47 +08:00
6cf1dbe648
After a morning of searching, it seems there is no PHP Markdown library that has built-in XSS/sanitization support. The recommended solution is to use HTMLPurifier. This actually works out OK, though, as it’s probably a good idea to enforce sanitization regardless of which formatters are enabled, and to not leave them with the responsibility of sanitization (it’s a big responsibility). Since we cache rendered posts, the slow speed of HTMLPurifier isn’t a concern. Note that HTMLPurifier requires a file to be loaded by Composer, but Studio does not yet support this, so for now I have included it manually.
34 lines
865 B
JSON
34 lines
865 B
JSON
{
|
|
"name": "flarum/core",
|
|
"description": "",
|
|
"authors": [
|
|
{
|
|
"name": "Toby Zerner",
|
|
"email": "toby@flarum.org"
|
|
}
|
|
],
|
|
"require": {
|
|
"php": ">=5.4.0",
|
|
"illuminate/support": "5.0.*",
|
|
"tobscure/json-api": "dev-master",
|
|
"tobscure/permissible": "dev-master",
|
|
"misd/linkify": "1.1.*",
|
|
"oyejorge/less.php": "dev-master",
|
|
"intervention/image": "dev-master",
|
|
"ezyang/htmlpurifier": "dev-master"
|
|
},
|
|
"require-dev": {
|
|
"fzaninotto/faker": "1.4.0",
|
|
"codeception/codeception": "~2.0.0",
|
|
"codeception/mockery-module": "*",
|
|
"laracasts/testdummy": "~2.0",
|
|
"squizlabs/php_codesniffer": "2.*"
|
|
},
|
|
"autoload": {
|
|
"psr-4": {
|
|
"Flarum\\": "src/"
|
|
}
|
|
},
|
|
"minimum-stability": "dev"
|
|
}
|