diff options
Diffstat (limited to 'src/controller/Security.php')
| -rw-r--r-- | src/controller/Security.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/controller/Security.php b/src/controller/Security.php index 818a2bd..f9092e2 100644 --- a/src/controller/Security.php +++ b/src/controller/Security.php | |||
| @@ -9,7 +9,7 @@ class Security | |||
| 9 | 'safe'=>1, // protection contre les élements et attributs dangereux | 9 | 'safe'=>1, // protection contre les élements et attributs dangereux |
| 10 | 10 | ||
| 11 | // liste blanche d'éléments HTML | 11 | // liste blanche d'éléments HTML |
| 12 | 'elements'=> 'h1, h2, h3, h4, h5, h6, p, s, em, span, strong, a, ul, ol, li, sup, sub, code, blockquote, div, pre, table, caption, colgroup, col, tbody, tr, th, td, figure, img, figcaption, iframe, small', | 12 | 'elements'=> 'h1, h2, h3, h4, h5, h6, p, br, s, em, span, strong, a, ul, ol, li, sup, sub, code, blockquote, div, pre, table, caption, colgroup, col, tbody, tr, th, td, figure, img, figcaption, iframe, small', |
| 13 | 13 | ||
| 14 | // liste noire d'attributs HTML | 14 | // liste noire d'attributs HTML |
| 15 | 'deny_attribute'=> 'id, class' // on garde 'style' | 15 | 'deny_attribute'=> 'id, class' // on garde 'style' |