OWASP java-html-sanitizer issues

OWASP / java-html-sanitizer

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.

Other

833 stars 210 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Issue with HTML Sanitization: Improper Handling of <div> Tag Inside <table>

#342 sumitkumar1110 opened 2 weeks ago
0
Please build the Java8/10 shim classes into the sanitizer JAR

#341 jlczuk opened 2 weeks ago
0
text-align literals are outdated

#340 DeepSnowNeeL opened 1 month ago
0
Make StylingPolicy public

#339 EugenMayer opened 2 months ago
0
On Java8Shim class, better to catch Throwable instead of Error

#338 JuanMiguelBG-Ticarum opened 2 months ago
0
Possible to enforce having mutliple attributes on tag?

#337 tom-mayer opened 2 months ago
0
rel attributes are reordered in 20220608.1

#336 damianszczepanik opened 2 months ago
0
Allows start, end, justify-all and match-parent as text-align values.

#335 martin-jackson opened 2 months ago
1
allowAttributes("style").globally() shouldn't imply allowStyling() - Regression with 2024 version

#334 subbudvk opened 2 months ago
3
Issues encountered while processing <a> tags

#333 hw30026125 opened 2 months ago
0
Question: What means Recognize foreign content syntactic context: mathml / svg?

#332 RyosukeFukatani opened 2 months ago
0
Issue in 2024x version with styles

#331 subbudvk opened 3 months ago
0
Release 20240325 cannot be transpiled

#330 chris-moon closed 3 months ago
1
ClassNotFoundException: org.owasp.shim.Java8Shim after update to 20240325.1

#329 veita opened 3 months ago
5
Shim Java 10 collections APIs

#328 mikesamuel closed 3 months ago
5
Fixes in HTML Lexer to support HTML empty comment statements

#327 jfbyers opened 4 months ago
13
Support standard attributes in TABLES Policy

#326 subbudvk opened 4 months ago
2
Require at least Java 11

#325 csware closed 3 months ago
0
Updated SECURITY.MD file with relevant details.

#324 nuke100pr closed 3 months ago
4
Sanitizing CSS

#323 subbudvk opened 4 months ago
3
Eliminate unnecessary nested statement(s) within else clauses

#322 csware opened 5 months ago
2
Fix JDK9

#321 csware closed 3 months ago
5
Cleanup redundant specification of type parameters

#320 csware closed 5 months ago
0
Drop travis badge and add GitHub workflow badge

#319 csware closed 5 months ago
1
Get tests passing and recognize foreign content nodes better

#318 mikesamuel closed 5 months ago
4
Move test helper to test directory

#317 csware closed 5 months ago
0
Drop unnecessary import

#316 csware closed 5 months ago
0
Update valid word-break CSS property values

#315 csware closed 5 months ago
3
Increase test coverage

#314 csware closed 5 months ago
0
Unbreak CssSchema.withProperties(Map)

#313 csware closed 5 months ago
0
Add overflow-wrap to CssSchema definition list

#312 csware closed 5 months ago
0
Undo JDK6 hack

#311 csware closed 5 months ago
0
Fix examples in README.md

#310 csware opened 5 months ago
2
SECURITY.MD currently does not contain sensible information

#309 csware opened 5 months ago
0
Add .gitattributes

#308 csware closed 5 months ago
0
Fix repeatedly adding rel values

#307 csware closed 5 months ago
7
Html sanitizer repeatedly adds rel="noopener noreferrer" even if it's pre-exist

#306 anudhuri23 closed 5 months ago
1
Add GitHub actions for testing

#305 csware closed 5 months ago
0
Update the maven-compiler-plugin to make the --release check work

#304 csware closed 5 months ago
4
Remove mentionings of guava

#303 csware closed 5 months ago
1
Avoid unnecessary copies

#302 csware closed 5 months ago
0
Guava removal breaks compatibility (with JDK9)

#301 csware closed 3 months ago
13
Index out of bound when empty list is passed to `allowAttributes(...).globally()`

#300 1003n40 closed 5 months ago
0
Fix index out of bound exception when attributes list is empty

#299 1003n40 closed 5 months ago
3
Encoding malicious code instead of removing it

#298 bmscodespace opened 5 months ago
4
Fix : CSS Child Combinator Parsing Bug

#297 subbudvk closed 5 months ago
2
Remove malicious code from svg content

#296 mantri-mounika opened 6 months ago
1
Bump to the latest Guava version to avoid CVEs and be up to date

#295 casewalker closed 5 months ago
9
Fix : Support xxx-large and medium css font-size values.

#294 subbudvk closed 5 months ago
3
Test : Add test when raw string has rel="noopener noreferrer"

#293 subbudvk closed 5 months ago
0