* Removed --sanitize and --no-sanitize, replaced with --plugin htmlscrubber
[ikiwiki] / doc / news / sanitization.mdwn
1 ikiwiki's main outstanding security hole, lack of html sanitization, has
2 now been addressed. ikiwiki now sanitizes html by default, using the
3 [[plugins/htmlscrubber]] plugin.
4
5 If only trusted parties can edit your wiki's content, then you might want
6 to turn this sanitization back off to allow use of potentially dangerous
7 tags. To do so, pass --disable-plugin=sanitize or edit the plugins
8 configuration in your [[ikiwiki.setup]].