Skip to content

HTML Sanitizer: Wrong Methodnames #21211

@dergel

Description

@dergel

https://symfony.com/doc/current/html_sanitizer.html#allow-elements

->allowedLinkSchemes(['http', 'https', 'mailto'])

->allowedLinkHosts(['symfony.com'])

->allowedMediaSchemes(['http', 'https', 'mailto'])

->allowedMediaHosts(['symfony.com']) // Also allows any subdomain (i.e. www.symfony.com)

should be allow not allowed. allowed Methods are internal calls.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions