內容簡介
HTML Purified 會使用 HTML Purifier 這個強大的 HTML 過濾函式庫,取代預設的 WordPress
評論過濾器。
HTML Purifier 是一個符合標準的 PHP HTML 過濾函式庫。HTML Purifier 會刪除所有惡意代
碼 (又稱為 XSS) ,並使用嚴格審查的、安全而寬鬆的白名單,確保您的文件符合標準。
只有全面了解 W3C 規範才能實現這一點。
HTML Purifier 的另一個特點是,它會產生有效和經過格式化的 XHTML 代碼,這是 KSES 所
不能做的事情。
功能:
可配置的 KSES 或 HTML Purifier
可配置的 HTML 元素和屬性列表,適用於 KSES 和 HTML purifier
使用 HTML Tidy 額外處理評論
URL 黑名單
完全本地化 (等待翻譯)
自動轉義 PHP 或反引號內的任何內容
HTML Purifier 可用於:
英文
西班牙文,感謝 José Cuesta
白俄羅斯文,感謝 Marcis Gasuns
俄文,感謝 Ilyuha
烏茲別克文,感謝 Alexandra Bolshova
荷蘭文,感謝 Pieter
德文,感謝 Andreas Beraz
波蘭文,感謝 Kasia Ciszewski 和 Dawid Śpiechowicz
羅馬尼亞文,感謝 Alina @ InboxTranslations.com
立陶宛文,感謝 Nata Strazda
烏克蘭文,感謝 Iflexion Design
文件
完整的文檔可以在 HTML Purified 頁面上找到。
外掛標籤
開發者團隊
原文外掛簡介
HTML Purified replaces the default WordPress comments filters with HTML Purifier, a super HTML filtering
library.
HTML Purifier is a standards-compliant HTML filter library written in PHP. HTML Purifier will
not only remove all malicious code (better known as XSS) with a thoroughly audited, secure yet
permissive whitelist, it will also make sure your documents are standards compliant, something
only achievable with a comprehensive knowledge of W3C’s specifications.
An additional feature of HTML Purifier is that it will produce valid well-formed XHTML code, something
which KSES does not do.
Features:
Configurable KSES or HTML Purifier
Configurable list of HTML elements and attributes for both KSES and HTML purifier
Additionally process comments with HTML Tidy
URL blacklist
Fully localized (and awaiting translations)
Automatically escape PHP or anything inside backticks
HTML Purifier is available in:
English
Spanish, thanks to José Cuesta
Belorussian, thanks to Marcis Gasuns
Russian, thanks to Ilyuha
Uzbekistan, thanks to Alexandra Bolshova
Dutch, thanks to Pieter
German, thanks to Andreas Beraz
Polish, thanks to Kasia Ciszewski & Dawid Śpiechowicz
Romanian, thanks to Alina @ InboxTranslations.com
Lithuanian, thanks to Nata Strazda
Ukranian, thanks to Iflexion Design
Documentation
Full documentation can be found on the HTML Purified page.
