[tt-rss.git] / lib / htmlpurifier / library / HTMLPurifier / ConfigSchema / schema / Attr.EnableID.txt

Attr.EnableID
TYPE: bool
DEFAULT: false
VERSION: 1.2.0
--DESCRIPTION--
Allows the ID attribute in HTML.  This is disabled by default due to the
fact that without proper configuration user input can easily break the
validation of a webpage by specifying an ID that is already on the
surrounding HTML.  If you don't mind throwing caution to the wind, enable
this directive, but I strongly recommend you also consider blacklisting IDs
you use (%Attr.IDBlacklist) or prefixing all user supplied IDs
(%Attr.IDPrefix).  When set to true HTML Purifier reverts to the behavior of
pre-1.2.0 versions.
--ALIASES--
HTML.EnableAttrID
--# vim: et sw=4 sts=4
Commit	Line	Data
f45a286b AD	1	Attr.EnableID
	2	TYPE: bool
	3	DEFAULT: false
	4	VERSION: 1.2.0
	5	--DESCRIPTION--
	6	Allows the ID attribute in HTML. This is disabled by default due to the
	7	fact that without proper configuration user input can easily break the
	8	validation of a webpage by specifying an ID that is already on the
	9	surrounding HTML. If you don't mind throwing caution to the wind, enable
	10	this directive, but I strongly recommend you also consider blacklisting IDs
	11	you use (%Attr.IDBlacklist) or prefixing all user supplied IDs
	12	(%Attr.IDPrefix). When set to true HTML Purifier reverts to the behavior of
	13	pre-1.2.0 versions.
	14	--ALIASES--
	15	HTML.EnableAttrID
	16	--# vim: et sw=4 sts=4