Warning: This plugin has't been updated in over 11 years. It may no longer be maintained.
What you can do to help:
Elgg | Release | Download | Date | Links |
1.8 | 1.1 | () | 2011-May-24 | |
1.7 | 1.0 | () | 2011-May-23 |
This plugin provides alternative support to HTMLawed for filtering user input. It is supposedly more secure, but also probably slower. That means you should be able to safely disable the HTMLawed plugin as long as you enable this one. Of course, it would be wise to TEST THIS PLUGIN BEFORE RELYING ON IT to make sure I didn't make a mistake that leaves your site vulnerable.
This plugin ships with the default configuration of HTMLPurifier. If you'd like to customize this configuration in an upgrade-safe way, you can use the provided plugin hook like so:
elgg_register_plugin_hook_handler('config', 'htmlpurifier', 'foo');
function foo($hook, $type, $config) { $config->set(...); return $config; }
See http://htmlpurifier.org for details about configuring HTML Purifier as well as comparisons with other filtering tools.
Features
View Evan Winslow's plugins
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.