OWASP / java-html-sanitizer

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
Other
854 stars 214 forks source link

PolicyFactory from external configuration #165

Open marcelstoer opened 5 years ago

marcelstoer commented 5 years ago

I was looking for a way to externalize a policy definition and have the factory or the builder load it from YAML, HOCON, properties etc.

Is this not supported on purpose (e.g. because it ain't feasible) or was there simply no interest / time?

mikesamuel commented 5 years ago

https://github.com/OWASP/java-html-sanitizer/pull/161 related policies to AntiSamy policy XML.