Filters
Dubsite lets you configure custom filters, that can be used to filter user-input, before it is sent to the browser. In other words: Filters prevent the output of potentially harmful code. Some plugins let you select a filter, that will then be applied to certain data. You can, for example, select a filter for the intro- and body-text of an article, if you go to Configuration -> Settings and open the box "Article".
It is possible to create custom filters or to edit the default filters, that come with Dubsite. Default filters are:
- Standard HTML: Not very restrictive, but OK for people you trust.
- Secure HTML: More restrictive filter, that allows no dangerous tags.
- No HTML: Most secure, because no HTML is allowed at all.
Take a look at one of the default filters: Go to Configuration -> Filters in the backend and click on the "Standard HTML"-filter to edit it.
The "Weight" defines the order, in which the filters are displayed in selectboxes.
The "Allowed HTML-tags" and "Allowed HTML-attributes" are whitelists: all tags and attributes, that are not in the list, will be stripped from the output. If these lists are empty, no HTML will be allowed.