gamecult-grav/config/security.yaml
2022-07-02 06:29:12 +02:00

40 lines
552 B
YAML

xss_whitelist:
- admin.super
xss_enabled:
on_events: true
invalid_protocols: true
moz_binding: true
html_inline_styles: false
dangerous_tags: false
xss_invalid_protocols:
- javascript
- livescript
- vbscript
- mocha
- feed
- data
xss_dangerous_tags:
- applet
- meta
- xml
- blink
- link
- style
- script
- embed
- object
- iframe
- frame
- frameset
- ilayer
- layer
- bgsound
- title
- base
uploads_dangerous_extensions:
- php
- html
- htm
- exe
sanitize_svg: true
salt: E6IAr1hio0xpsf