lucas.mathieu/cachet-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #3383 from CachetHQ/markdown-defaults

Browse Source 
Use safer markdown defaults
This commit is contained in:
James Brooks
2018-12-30 09:18:00 +00:00
committed by GitHub
parent 9d4193ba45 468e4e329e
commit 7d5bb0348d
1 changed files with 30 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
config/markdown.php
View File

@@ -119,16 +119,41 @@ return [
/*
|--------------------------------------------------------------------------
| Safe Mode
| HTML Input
|--------------------------------------------------------------------------
|
| This option specifies if raw HTML is rendered in the document. Setting
| this to true will not render HTML, and false will.
| This option specifies how to handle untrusted HTML input.
|
| Default: false
| Default: 'strip'
|
*/
'safe' => true,
'html_input' => 'strip',
/*
|--------------------------------------------------------------------------
| Allow Unsafe Links
|--------------------------------------------------------------------------
|
| This option specifies whether to allow risky image URLs and links.
|
| Default: true
|
*/
'allow_unsafe_links' => false,
/*
|--------------------------------------------------------------------------
| Maximum Nesting Level
|--------------------------------------------------------------------------
|
| This option specifies the maximum permitted block nesting level.
|
| Default: INF
|
*/
'max_nesting_level' => INF,
];