Use safer markdown defaults

This commit is contained in:
Graham Campbell
2018-12-30 03:08:22 +00:00
committed by GitHub
parent 9d4193ba45
commit 468e4e329e

View File

@@ -119,16 +119,41 @@ return [
/*
|--------------------------------------------------------------------------
| Safe Mode
| HTML Input
|--------------------------------------------------------------------------
|
| This option specifies if raw HTML is rendered in the document. Setting
| this to true will not render HTML, and false will.
| This option specifies how to handle untrusted HTML input.
|
| Default: false
| Default: 'strip'
|
*/
'safe' => true,
'html_input' => 'strip',
/*
|--------------------------------------------------------------------------
| Allow Unsafe Links
|--------------------------------------------------------------------------
|
| This option specifies whether to allow risky image URLs and links.
|
| Default: true
|
*/
'allow_unsafe_links' => false,
/*
|--------------------------------------------------------------------------
| Maximum Nesting Level
|--------------------------------------------------------------------------
|
| This option specifies the maximum permitted block nesting level.
|
| Default: INF
|
*/
'max_nesting_level' => INF,
];