search

ezyang / htmlpurifier

Standards compliant HTML filter written in PHP
http://htmlpurifier.org
GNU Lesser General Public License v2.1
3.07k stars 327 forks source link

Security flags #193

Closed chalbert-edr closed 5 years ago

chalbert-edr commented 5 years ago

The release scripts are used for svn, so these were removed because obviously this is now in git. Since e() is necessary, we simply whitelisted and added tests so you can verify.

Please let me know if there's something we can do differently to get this into the upcoming minor/patch release. I'd like to contribute to this awesome package. Thank you!

ezyang commented 5 years ago

I'll try to make these scripts more safe, but I can't accept this patch:

  1. I do use the release1-update script when I do releases
  2. I'm not accepting an entirely new unit test framework. One unit test framework is enough for a project.