]>
Commit | Line | Data |
---|---|---|
d4949327 NL |
1 | URI.AllowedSchemes\r |
2 | TYPE: lookup\r | |
3 | --DEFAULT--\r | |
4 | array (\r | |
5 | 'http' => true,\r | |
6 | 'https' => true,\r | |
7 | 'mailto' => true,\r | |
8 | 'ftp' => true,\r | |
9 | 'nntp' => true,\r | |
10 | 'news' => true,\r | |
11 | )\r | |
12 | --DESCRIPTION--\r | |
13 | Whitelist that defines the schemes that a URI is allowed to have. This\r | |
14 | prevents XSS attacks from using pseudo-schemes like javascript or mocha.\r | |
15 | There is also support for the <code>data</code> and <code>file</code>\r | |
16 | URI schemes, but they are not enabled by default.\r | |
17 | --# vim: et sw=4 sts=4\r |