37 lines
987 B
PHP
37 lines
987 B
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of Cachet.
|
|
*
|
|
* (c) Alt Three Services Limited
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
return [
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Evil attributes
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| This defines the evil attributes and they will be always be removed from
|
|
| the input.
|
|
|
|
|
*/
|
|
'evil' => ['(?<!\w)on\w*', 'style', 'xmlns', 'formaction', 'form', 'xlink:href', 'FSCommand', 'seekSegmentTime'],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Always authenticate
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Whether to lock down Cachet and only allow viewing pages
|
|
| when authenticated.
|
|
|
|
|
*/
|
|
'always_authenticate' => true,
|
|
|
|
];
|