OWASP / java-html-sanitizer

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
Other
843 stars 213 forks source link

Allow colspan attribute on td and th elements in TABLES PolicyFactory #195

Open krische opened 4 years ago

krische commented 4 years ago

It looks like the TABLES PolicyFactory in Sanitizers class does not allow the colspan attribute on td and th elements.

I see no reason why it couldn't.

jmanico commented 4 years ago

I agree colspan should safe...

-- Jim Manico @Manicode

On Apr 8, 2020, at 4:58 PM, Brian Krische notifications@github.com wrote:

 It looks like the TABLES PolicyFactory in Sanitizers class does not allow the colspan attribute on td and th elements.

I see no reason why it couldn't.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

xiang-tianyu commented 3 years ago

Maybe should allow rowspan as well