Would you rather (reject the input and error) or (accept the input, but strip HTML tags from the input)?
Last updated
1 year ago.
I would reject it, becuase I expect user to input comment.
Last updated
1 year ago.
For comments I'd rather go with stripping the HTML tags out. I couldn't be bothered to rewrite a comment, really. Something like HTMLPurifier will let you do that. It'll allow certain HTML tags, like p or a, but will strip everything else. It'll also let you fix the HTML by closing missing tags, etc.
Last updated
1 year ago.
Sign in to participate in this thread!
Laravel
Laravel News
Laracasts
Laravel Podcast