php-content/composer.json

{
    "name": "host-uk/core-content",
    "description": "Content management and headless CMS for Laravel",
    "keywords": ["laravel", "content", "cms", "headless"],
    "license": "EUPL-1.2",
    "require": {
        "php": "^8.2",
        "host-uk/core": "dev-main",
        "ezyang/htmlpurifier": "^4.17"
    },
    "require-dev": {
        "laravel/pint": "^1.18",
        "orchestra/testbench": "^9.0|^10.0",
        "pestphp/pest": "^3.0"
    },
    "autoload": {
        "psr-4": {
            "Core\\Mod\\Content\\": ""
        }
    },
    "autoload-dev": {
        "psr-4": {
            "Core\\Mod\\Content\\Tests\\": "Tests/"
        }
    },
    "extra": {
        "laravel": {
            "providers": [
                "Core\\Mod\\Content\\Boot"
            ]
        }
    },
    "scripts": {
        "lint": "pint",
        "test": "pest"
    },
    "config": {
        "sort-packages": true,
        "allow-plugins": {
            "pestphp/pest-plugin": true
        }
    },
    "minimum-stability": "dev",
    "prefer-stable": true
}
Initial commit 2026-01-26 23:24:57 +00:00			`{`
monorepo sepration 2026-01-26 23:59:46 +00:00			`"name": "host-uk/core-content",`
			`"description": "Content management and headless CMS for Laravel",`
			`"keywords": ["laravel", "content", "cms", "headless"],`
Initial commit 2026-01-26 23:24:57 +00:00			`"license": "EUPL-1.2",`
			`"require": {`
			`"php": "^8.2",`
fix(security): require HTMLPurifier for XSS sanitisation The previous getSanitisedContent() method fell back to strip_tags() when HTMLPurifier was unavailable. This fallback was insecure as strip_tags() does not sanitise attributes, allowing XSS via onclick, onerror, and javascript: URLs. Changes: - Created Services/HtmlSanitiser.php using HTMLPurifier as the sole sanitiser - Added ezyang/htmlpurifier as a required dependency in composer.json - Added boot-time validation that throws RuntimeException if missing - Removed insecure strip_tags() fallback from ContentItem model - Added 30+ unit tests covering XSS attack vectors Closes SEC-002 from TODO.md Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> 2026-01-29 12:34:35 +00:00			`"host-uk/core": "dev-main",`
			`"ezyang/htmlpurifier": "^4.17"`
Initial commit 2026-01-26 23:24:57 +00:00			`},`
			`"require-dev": {`
			`"laravel/pint": "^1.18",`
monorepo sepration 2026-01-26 23:59:46 +00:00			`"orchestra/testbench": "^9.0\|^10.0",`
			`"pestphp/pest": "^3.0"`
Initial commit 2026-01-26 23:24:57 +00:00			`},`
			`"autoload": {`
			`"psr-4": {`
refactor: rename namespace Core\Content to Core\Mod\Content Aligns content module namespace with the standard module structure convention (Core\Mod\{Name}) for consistency across the monorepo. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> 2026-01-27 16:24:53 +00:00			`"Core\\Mod\\Content\\": ""`
Initial commit 2026-01-26 23:24:57 +00:00			`}`
			`},`
			`"autoload-dev": {`
			`"psr-4": {`
refactor: rename namespace Core\Content to Core\Mod\Content Aligns content module namespace with the standard module structure convention (Core\Mod\{Name}) for consistency across the monorepo. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> 2026-01-27 16:24:53 +00:00			`"Core\\Mod\\Content\\Tests\\": "Tests/"`
Initial commit 2026-01-26 23:24:57 +00:00			`}`
			`},`
			`"extra": {`
			`"laravel": {`
monorepo sepration 2026-01-26 23:59:46 +00:00			`"providers": [`
refactor: rename namespace Core\Content to Core\Mod\Content Aligns content module namespace with the standard module structure convention (Core\Mod\{Name}) for consistency across the monorepo. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> 2026-01-27 16:24:53 +00:00			`"Core\\Mod\\Content\\Boot"`
monorepo sepration 2026-01-26 23:59:46 +00:00			`]`
Initial commit 2026-01-26 23:24:57 +00:00			`}`
			`},`
monorepo sepration 2026-01-26 23:59:46 +00:00			`"scripts": {`
			`"lint": "pint",`
			`"test": "pest"`
			`},`
Initial commit 2026-01-26 23:24:57 +00:00			`"config": {`
			`"sort-packages": true,`
			`"allow-plugins": {`
monorepo sepration 2026-01-26 23:59:46 +00:00			`"pestphp/pest-plugin": true`
Initial commit 2026-01-26 23:24:57 +00:00			`}`
			`},`
monorepo sepration 2026-01-26 23:59:46 +00:00			`"minimum-stability": "dev",`
Initial commit 2026-01-26 23:24:57 +00:00			`"prefer-stable": true`
			`}`