search

1049884729 / owasp-java-html-sanitizer

Automatically exported from code.google.com/p/owasp-java-html-sanitizer
Other
0 stars 0 forks source link

HTML em tag not accepted as an inline formatting element #31

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Initialize a sanitizer as Sanitizers.BLOCKS.and(Sanitizers.FORMATTING).
2. Attempt to sanitize the string "<em>Emphasized</em>".  This trips off the 
<em> tags.

What is the expected output? What do you see instead?
I would expect to see <em>Emphasized</em>.  I see Emphasized instead.

What version of the product are you using? On what operating system?
r239.  Any OS

Please provide any additional information below.
Some HTML programmers consider em and strong to be legacy and obsolete.  
However, the HTML standard still supports them.  Additionally, The OWASP 
Sanitizer supports the strong tag but not the em tag.  If strong is supported, 
so should be em.

Original issue reported on code.google.com by manish.i...@gmail.com on 9 Jul 2014 at 5:06

GoogleCodeExporter commented 9 years ago 
Will do.

For reference : 
http://www.w3.org/TR/html5/text-level-semantics.html#the-em-element

Original comment by mikesamuel@gmail.com on 9 Jul 2014 at 12:34