Monday, August 11, 2014

Re: htmlpurifier sanitize form data

Thanks Mark

I wasnt able to find the solution there, unless im completely missing something.


On Monday, August 11, 2014 12:43:48 PM UTC+1, euromark wrote:
Maybe you want to use https://github.com/burzum/cakephp-html-purifier instead.
Its also documented

mark


Am Montag, 11. August 2014 13:24:27 UTC+2 schrieb vbpupil:
Not sure if anyone is familiar with this plugin? i have it installed and can sanaitize indiviual strings ie:

$test = Purifier::clean('<strong>hi<script>$( document ).ready(function() { alert("hacked!");});</script>', 'general');


which is working fine but i want to sanitize my form data ie:


$this->request->data = Purifier::clean($this->request->data, 'general');

which is failing because its an array (see below). Surely there must be an easier way to do this?



   
preg_match() expects parameter 2 to be string, array given [APP/Plugin/HtmlPurifier/Vendor/HtmlPurifier/library/HTMLPurifier/Lexer.php, line 316]


--
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP

---
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cake-php+unsubscribe@googlegroups.com.
To post to this group, send email to cake-php@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php.
For more options, visit https://groups.google.com/d/optout.

No comments: