AutorÃa | Ultima modificación | Ver Log |
Filter.ExtractStyleBlocks.ScopeTYPE: string/nullVERSION: 3.0.0DEFAULT: NULLALIASES: Filter.ExtractStyleBlocksScope, FilterParam.ExtractStyleBlocksScope--DESCRIPTION--<p>If you would like users to be able to define external stylesheets, butonly allow them to specify CSS declarations for a specific node andprevent them from fiddling with other elements, use this directive.It accepts any valid CSS selector, and will prepend this to anyCSS declaration extracted from the document. For example, if thisdirective is set to <code>#user-content</code> and a user uses theselector <code>a:hover</code>, the final selector will be<code>#user-content a:hover</code>.</p><p>The comma shorthand may be used; consider the above example, with<code>#user-content, #user-content2</code>, the final selector willbe <code>#user-content a:hover, #user-content2 a:hover</code>.</p><p><strong>Warning:</strong> It is possible for users to bypass this measureusing a naughty + selector. This is a bug in CSS Tidy 1.3, not HTMLPurifier, and I am working to get it fixed. Until then, HTML Purifierperforms a basic check to prevent this.</p>--# vim: et sw=4 sts=4