mirror of
https://github.com/HDInnovations/UNIT3D-Community-Edition.git
synced 2026-02-11 22:19:47 -06:00
ad716d7cc3
We've been mostly relying on the 3rd party xss cleaner to make sure user submitted content is clean. This PR fixes up any leftover holes in the bbcode parser that allow xss vulnerabilities, and as a result, the 3rd party library isn't needed anymore. It cleans responsibly by first, running `htmlspecialchars()` over the content, followed by sanitizing the untrusted urls and whitelisting their protocol.
118 lines
3.8 KiB
JSON
118 lines
3.8 KiB
JSON
{
|
|
"name": "laravel/laravel",
|
|
"description": "The Laravel Framework.",
|
|
"keywords": [
|
|
"framework",
|
|
"laravel"
|
|
],
|
|
"license": "MIT",
|
|
"type": "project",
|
|
"require": {
|
|
"php": ">=8.3",
|
|
"ext-dom": "*",
|
|
"ext-json": "*",
|
|
"ext-libxml": "*",
|
|
"ext-zend-opcache": "*",
|
|
"ext-zip": "*",
|
|
"assada/laravel-achievements": "^2.7",
|
|
"bjeavons/zxcvbn-php": "^1.4.1",
|
|
"doctrine/dbal": "^3.9.3",
|
|
"gabrielelana/byte-units": "^0.5.0",
|
|
"graham-campbell/markdown": "^15.2",
|
|
"guzzlehttp/guzzle": "^7.9.2",
|
|
"hdvinnie/laravel-joypixel-emojis": "^v3.0.0",
|
|
"hdvinnie/laravel-security-headers": "^v3.0.0",
|
|
"intervention/image": "^2.7.2",
|
|
"joypixels/assets": "^v7.0.1",
|
|
"laravel/fortify": "1.20.0",
|
|
"laravel/framework": "^11.36.1",
|
|
"laravel/octane": "^2.6.0",
|
|
"laravel/scout": "^10.11.9",
|
|
"laravel/tinker": "^2.10.0",
|
|
"livewire/livewire": "^3.5.18",
|
|
"marcreichel/igdb-laravel": "^4.3.0",
|
|
"meilisearch/meilisearch-php": "^1.12.0",
|
|
"nesbot/carbon": "2.72.3",
|
|
"paragonie/constant_time_encoding": "^2.7.0",
|
|
"resend/resend-laravel": "^0.14.0",
|
|
"spatie/laravel-backup": "^8.8.2",
|
|
"spatie/laravel-cookie-consent": "^3.3.2",
|
|
"spatie/laravel-image-optimizer": "^1.8.0",
|
|
"spatie/ssl-certificate": "^2.6.8",
|
|
"symfony/dom-crawler": "^6.4.16",
|
|
"theodorejb/polycast": "dev-master",
|
|
"vstelmakh/url-highlight": "^3.1.1"
|
|
},
|
|
"require-dev": {
|
|
"barryvdh/laravel-debugbar": "^3.14.10",
|
|
"brianium/paratest": "^7.7",
|
|
"calebdw/larastan": "^v2.10.11",
|
|
"calebdw/larastan-livewire": "^v1.1.0",
|
|
"fakerphp/faker": "^1.24.1",
|
|
"jasonmccreary/laravel-test-assertions": "^2.4.1",
|
|
"laravel/pint": "v1.18.3",
|
|
"laravel/sail": "^1.39.1",
|
|
"mockery/mockery": "^1.6.12",
|
|
"nunomaduro/collision": "^8.5.0",
|
|
"pestphp/pest": "^3.7.1",
|
|
"pestphp/pest-plugin-laravel": "^3.0",
|
|
"pestphp/pest-plugin-livewire": "^3.0",
|
|
"phpstan/phpstan": "^1.12.13",
|
|
"phpunit/phpunit": "^11.5.1",
|
|
"ryoluo/sail-ssl": "^1.3.2",
|
|
"spatie/laravel-ignition": "^2.9.0",
|
|
"tomasvotruba/bladestan": "^0.5.0"
|
|
},
|
|
"config": {
|
|
"preferred-install": "dist",
|
|
"sort-packages": true,
|
|
"optimize-autoloader": true,
|
|
"platform": {
|
|
"ext-mcrypt": "1.0"
|
|
},
|
|
"allow-plugins": {
|
|
"pestphp/pest-plugin": true,
|
|
"php-http/discovery": true
|
|
}
|
|
},
|
|
"extra": {
|
|
"laravel": {
|
|
"dont-discover": []
|
|
}
|
|
},
|
|
"autoload": {
|
|
"psr-4": {
|
|
"App\\": "app/",
|
|
"Database\\Factories\\": "database/factories/",
|
|
"Database\\Seeders\\": "database/seeders/"
|
|
},
|
|
"files": [
|
|
"app/Helpers/Helpers.php"
|
|
]
|
|
},
|
|
"autoload-dev": {
|
|
"psr-4": {
|
|
"Tests\\": "tests/"
|
|
}
|
|
},
|
|
"minimum-stability": "stable",
|
|
"prefer-stable": true,
|
|
"scripts": {
|
|
"post-autoload-dump": [
|
|
"Illuminate\\Foundation\\ComposerScripts::postAutoloadDump",
|
|
"@php artisan package:discover --ansi",
|
|
"@php artisan vendor:publish --force --tag=livewire:assets --ansi",
|
|
"@php artisan vendor:publish --tag=public --provider=\"hdvinnie\\LaravelJoyPixels\\LaravelJoyPixelsServiceProvider\""
|
|
],
|
|
"post-root-package-install": [
|
|
"@php -r \"file_exists('.env') || copy('.env.example', '.env');\""
|
|
],
|
|
"post-create-project-cmd": [
|
|
"@php artisan key:generate --ansi"
|
|
],
|
|
"post-update-cmd": [
|
|
"@php artisan vendor:publish --tag=laravel-assets --ansi --force"
|
|
]
|
|
}
|
|
}
|