This project is not covered by Drupal’s security advisory policy.

The Good Site List input filter disables HTML forms whose domains are not part of an approved list. It works by stripping out the "action" attribute for all forms which are not on the good site list. For example, you could use this to enable all forms that submit to http://www.good-site.com while disabling forms that submit to http://www.evil-site.com or other suspicious destinations.

I wrote this module to solve a specific need on my website. It could be generalized to support allowing of other HTML in addition to forms, such as hyperlinks and images. Another enhancement worth considering would be the ability to forbid domains rather than listing good domains. Maybe I'll eventually get around to adding those features, but for now this just does forms.

Project information

Releases