fix: Adjust Core.AllowHostnameUnderscore to consider that "_" is defined as Unreserved Characters in RFC 3986

ezyang / htmlpurifier

Standards compliant HTML filter written in PHP

http://htmlpurifier.org

GNU Lesser General Public License v2.1

3.07k stars 327 forks source link

Closed matsuo closed 5 months ago

matsuo commented 5 months ago

Hello, Thank you so much for developing and maintaining HTML Purifier.

I have created a pull request for #405. Recently, we have seen cases where we want to consider URIs that contain "_", such as "_dmarc.example.com".

I think this PR adjusts Core.AllowHostnameUnderscore to consider that "_" is defined as Unreserved Characters in RFC 3986.

Thank you.