15 Commits

Author	SHA1	Message	Date
Corey Donohoe	9644d4b00e	dupe sanitization attrs initialized by constants, fixes #200	2012-05-06 12:07:41 -07:00
Corey Donohoe	9a1dddaccf	whitelist apt uri schemes, fixes #233	2012-05-05 11:56:01 -07:00
Jussi Malinen	02073f827b	add id to whitelisted attributes. The transformers still seem to work and prefix ids with wiki-. Uncommented relevant tests.	2012-04-23 20:08:24 +03:00
Jesse Newland	be4c52202c	remove contents of script and style elements ... Avoids rendering HTML-ized CSS and/or Javascript by removing the contents of script and style elements as well as the elements themselves. /cc @technoweenie Pull Request: master	2012-01-08 22:07:33 -05:00
rick	5163f11ecb	allow ftp and irc protocol links in wiki pages	2011-12-22 09:30:27 -07:00
Joshua Peek	cc96786ac0	Fix Wiki XSS vuln	2011-11-15 15:29:05 -06:00
risk	2128559186	fix edge case where sanitize gem doesn't operate on <a> node if the custom transformer runs	2011-08-08 15:43:21 -07:00
risk	cd4704aed7	prefix name attributes too	2011-08-08 15:02:10 -07:00
risk	08a58b7520	Sanitization#id_prefix can be modified	2011-08-04 14:02:24 -07:00
risk	b2d372ab3c	id attribute transformers should always return a hash or nil	2011-07-21 15:47:00 -07:00
Schuyler Duveen	c22050fca8	allow @id attributes but force a "wiki-" prefix	2011-05-04 11:50:38 -04:00
rick	76064da131	A Gollum::Wiki saves Sanitize instances	2010-12-02 14:35:31 -08:00
rick	4dda9fb2ae	tomdoc'd	2010-11-20 13:08:39 -08:00
rick	3b94a6723c	integrate Sanitization class	2010-11-09 12:07:54 -08:00
7rans	26df05374c	provide customizable sanitization	2010-10-27 14:04:26 -04:00