Conversation:
Notices
-
@hannes True! We have to add the 'rel' parameter to HTML.AllowedAttributes for #HTMLPurifier: http://htmlpurifier.org/live/configdoc/plain.html#HTML.AllowedAttributes
-
@laemeur Btw, if you have a neat library-ish thing for #AtomPub I'd love to know about it, regardless of language. I think that's the best way to implement rich formatted notices from clients rather than using plugins that just try to interpret plain text from the Twitter-based API.
-
@hannes Yeah, because maybe there's a <script>something</script>, then "something" would be there if we didn't purify it first.
-
But now I'm going to bed after one more post!