Add option to control filtering of external references in user input

collectiveaccess · Sep 30, 2021 · 32907d0 · 32907d0
1 parent 5a3c20b
commit 32907d0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/app/conf/app.conf b/app/conf/app.conf
@@ -24,8 +24,14 @@ debug = 0
 minification = 0
 
 clean_urls = 1
+
+# Filter all text input
 purify_all_text_input = 1
 
+# Allow external references (Eg. img tags) in user input?
+# This can be a security hole. Only enable if you have to.
+purify_allow_external_references = 0
+
 
 # -------------------
 # Search engine configuration