Use safer markdown defaults

This commit is contained in:
Graham Campbell
2018-12-30 03:08:22 +00:00
committed by GitHub
parent 9d4193ba45
commit 468e4e329e
+30 -5
View File
@@ -119,16 +119,41 @@ return [
/* /*
|-------------------------------------------------------------------------- |--------------------------------------------------------------------------
| Safe Mode | HTML Input
|-------------------------------------------------------------------------- |--------------------------------------------------------------------------
| |
| This option specifies if raw HTML is rendered in the document. Setting | This option specifies how to handle untrusted HTML input.
| this to true will not render HTML, and false will.
| |
| Default: false | Default: 'strip'
| |
*/ */
'safe' => true, 'html_input' => 'strip',
/*
|--------------------------------------------------------------------------
| Allow Unsafe Links
|--------------------------------------------------------------------------
|
| This option specifies whether to allow risky image URLs and links.
|
| Default: true
|
*/
'allow_unsafe_links' => false,
/*
|--------------------------------------------------------------------------
| Maximum Nesting Level
|--------------------------------------------------------------------------
|
| This option specifies the maximum permitted block nesting level.
|
| Default: INF
|
*/
'max_nesting_level' => INF,
]; ];