<?php

/*
 * This file is part of Cachet.
 *
 * (c) Alt Three Services Limited
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

return [

    /*
    |--------------------------------------------------------------------------
    | Evil attributes
    |--------------------------------------------------------------------------
    |
    | This defines the evil attributes and they will be always be removed from
    | the input.
    |
    */
    'evil' => ['(?<!\w)on\w*', 'style', 'xmlns', 'formaction', 'form', 'xlink:href', 'FSCommand', 'seekSegmentTime'],

    /*
    |--------------------------------------------------------------------------
    | Always authenticate
    |--------------------------------------------------------------------------
    |
    | Whether to lock down Cachet and only allow viewing pages
    | when authenticated.
    |
    */
    'always_authenticate' => true,

];

<?php

/*
 * This file is part of Cachet.
 *
 * (c) Alt Three Services Limited
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

return [

    /*
    |--------------------------------------------------------------------------
    | Evil attributes
    |--------------------------------------------------------------------------
    |
    | This defines the evil attributes and they will be always be removed from
    | the input.
    |
    */
    'evil' => ['(?<!\w)on\w*', 'style', 'xmlns', 'formaction', 'form', 'xlink:href', 'FSCommand', 'seekSegmentTime'],

    /*
    |--------------------------------------------------------------------------
    | Always authenticate
    |--------------------------------------------------------------------------
    |
    | Whether to lock down Cachet and only allow viewing pages
    | when authenticated.
    |
    */
    'always_authenticate' => false,

];

Set the default always_authenticate flag to false
Set the default always_authenticate flag to false
