search

EmitKnowledge / Signals

Signals is a framework for developing enterprise and SaaS applications that follows the USE-CASE driven methodology
MIT License
59 stars 9 forks source link

HTMLSanitizer Question #48

Closed multimokia closed 2 weeks ago

multimokia commented 1 month ago

Hi there I was leveraging a few DTOs with the framework but noticed a common issue in that not all html was being cleaned up by the sanitizer's built-in methods.

I do see that the sanitizer does allow us to set allowed attributes, but this is something that needs to be done in a per-dto basis. Is there a way to assign this globally?

mnikolovski commented 2 weeks ago

By design we are setting this up intentionally to avoid security issues with XSS injection. At the moment Signals only supports exclusions per DTO basis.