fixing the xss problem

[summerblue]

Here is the fix for:

• XSS vulnerability  #120
• XSS problem  #161

[summerblue]

@driesvints LaravelIO is wonderful project, thanx for the hard work.

[summerblue]

Using this package -> https://github.com/mewebstudio/Purifier .
HTMLPurifier is white list filtering, the white list is specify in the config file see here, in this way, we have full control of the UGC.

My project is using it https://github.com/summerblue/phphub, HTMLPurifier is 🚀

[GrahamCampbell]

Don't use dev-master. Use a real value real version constraint.

[driesvints]

Can you make the minor version a wildcard? Bug fixes may be pulled in automatically.

[driesvints]

Erhm, I meant patch version of course.

[summerblue]

Got it.

[driesvints]

I'm gonna wait until next week with merging this in when I have more time. Laracon EU now :)

[driesvints]

Thanks a bunch!

[summerblue]

It is my honor. 😃