OWASP java-html-sanitizer issues

OWASP / java-html-sanitizer

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.

Other

843 stars 213 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Allow colspan attribute on td and th elements in TABLES PolicyFactory

#195 krische opened 4 years ago
2
Impossible to disallow text in elements

#194 eugine opened 4 years ago
1
decoded html entities in href

#193 fr3akX closed 4 years ago
1
word-break in style is discarded because it is not considered a valid value in CSSSchema

#192 mrabhishek opened 4 years ago
3
Error adding depency in sbt from Maven Central (insecure dependencies via http)

#191 phwiget closed 4 years ago
4
HTML encoding of normalized URLs

#190 xfh closed 4 years ago
6
Sanitize is removing elements / not following browser behavior

#189 rafaeljcg opened 4 years ago
1
Sanitizer stripping the 'id' attribute

#188 ghost closed 4 years ago
1
CSS URLs longer than 1024 characters are not allowed

#187 sapio-dwelch opened 4 years ago
4
Table formatting issue fix

#186 sneha-patil-synacor closed 4 years ago
3
Add OSGI bundle packaging

#185 benapple closed 4 years ago
9
CssSchema: Allow negative token values for margin property

#184 janis-github opened 5 years ago
6
style attribute "margin" property is missing fourth element after sanitizing

#183 janis-github closed 5 years ago
1
Preserve the casing of tags and attributes names.

#182 wookie41 closed 4 years ago
17
Travis build: openjdk8, openjdk11

#181 sullis closed 4 years ago
6
Examples should not be part of the final jar

#180 amanteaux opened 5 years ago
2
allowAttribute("style") should imply allowStyling()

#179 mikesamuel closed 3 years ago
1
Double quotes inside tags doesn't get encoded

#178 sndmails2arun closed 5 years ago
2
How to skip sanitization of the emojis

#177 PriyankPurwar opened 5 years ago
4
allowStyling() removes styles from span

#176 RafalZientara opened 5 years ago
5
How can I add Chinese characters to the white list, such as "," ":"and so on?

#175 jiazd closed 3 years ago
10
Add missing mappings for named HTML entities

#174 jacobrshields closed 5 years ago
11
cau you supply a mini version(suppot only sanitize, not encoding?

#173 LeoHuang2015 opened 5 years ago
1
cau you supply a mini version(suppot only sanitize, not encoding?

#172 LeoHuang2015 closed 5 years ago
1
Policy for unclosed tags

#171 guifeliper closed 4 years ago
1
sanitizing javascript encoded with decimal character references

#170 shrikant-prasad closed 5 years ago
3
Allow all policy

#169 sergeyk93 closed 5 years ago
3
Changed/Fixed Lambda to anonymous class of ElementPolicy in doc

#168 0xflotus closed 5 years ago
1
<a href='https://javascript:void(0)' target='_new' > not sanitized

#167 otolabqu closed 5 years ago
4
HTML Sanitizer incorrectly encodes URL in attributes

#166 rbgarcia closed 5 years ago
2
PolicyFactory from external configuration

#165 marcelstoer opened 5 years ago
1
Commented vulnerability is sanitized without being notified in HtmlChangeListener

#164 GalitTugi opened 5 years ago
2
Prevent StringIndexOutOfBoundsException on empty default rel set

#163 kyle-simmons closed 5 years ago
3
get rid of guava and use jdk8 as a minimum.

#162 carlmolemans closed 5 years ago
14
Allow import of OWASP AntiSamy XML policy files

#161 efge closed 5 years ago
6
lib/ directory is probably vestigial

#160 mikesamuel closed 5 years ago
0
Add means to log changes that occur during sanitization

#159 Thunderforge closed 5 years ago
2
Reproducible build

#158 efge closed 5 years ago
3
All-in-one version with shaded guava

#157 cnsgithub closed 7 months ago
7
add [openjdk11] to Travis build matrix

#156 sullis closed 5 years ago
1
HtmlChangeListener needs should be notified on unrenderable text nodes

#155 mikesamuel opened 6 years ago
1
library is not compatible with Guava 21.0 and later

#154 ispringer closed 5 years ago
7
Error sanitizing with --> in <script> tag

#153 jvbrandis closed 6 years ago
7
Allow comments to be preserved in HTML

#152 fvschie opened 6 years ago
6
skipRelsOnLinks causes StringIndexOutOfBoundsException

#151 hikoma closed 5 years ago
0
findbugs-maven-plugin 3.0.5

#150 sullis closed 5 years ago
2
add 'oraclejdk10' to the Travis build matrix

#149 sullis closed 5 years ago
1
It would be nice if FilterUrlByProtocolAttributePolicy was a bit more configurable

#148 xenomachina opened 6 years ago
2
Suggestion: Force links to be opened in new windows/tabs

#147 cnsgithub closed 5 years ago
6
JSR 305 annotations dependency should be replaced by some other nullability annotations library

#146 kwin opened 6 years ago
1

Previous Next