Skip to content

Commit

Permalink
Removed defaults for whitelist_classes output_filter and uri_filter
Browse files Browse the repository at this point in the history
  • Loading branch information
frankdejonge committed Nov 14, 2012
1 parent e5b9a7b commit 5d79967
Showing 1 changed file with 3 additions and 8 deletions.
11 changes: 3 additions & 8 deletions config/config.php
Original file line number Diff line number Diff line change
Expand Up @@ -131,7 +131,7 @@
* WARNING: Using xss_clean will cause a performance hit.
* How much is dependant on how much input data there is.
*/
'uri_filter' => array('htmlentities'),
'uri_filter' => array(),

/**
* This input filter can be any normal PHP function as well as 'xss_clean'
Expand All @@ -147,7 +147,7 @@
* WARNING: Using xss_clean will cause a performance hit.
* How much is dependant on how much input data there is.
*/
'output_filter' => array('Security::htmlentities'),
'output_filter' => array(),

/**
* Encoding mechanism to use on htmlentities()
Expand All @@ -168,12 +168,7 @@
* With output encoding switched on all objects passed will be converted to strings or
* throw exceptions unless they are instances of the classes in this array.
*/
'whitelisted_classes' => array(
'Fuel\\Core\\Response',
'Fuel\\Core\\View',
'Fuel\\Core\\ViewModel',
'Closure',
)
'whitelisted_classes' => array(),
),

/**
Expand Down

0 comments on commit 5d79967

Please sign in to comment.