search

andresriancho / owaspantisamy

Automatically exported from code.google.com/p/owaspantisamy
12 stars 15 forks source link

css filter wrong with font-family when supplying a list of fonts #49

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. allow font-family in policy, list some fonts (courier, serif)
2. allow span to have style attributes
3. test with string: "<span style="font-family: serif, 
courier;">preformated</span>"

What is the expected output? What do you see instead?
input should stay the same.
output now is: "<span style="">preformated</span>"
Filter error-msg is: non valid arguments for font-family
Filter is working if only 1 font is supplied.

What version of the product are you using? On what operating system?
os X, Java 1.6, latest jar antiSamy (1.3)

Please provide any additional information below.
my font-family-config:
        <property name="font-family"
            description="This property specifies a prioritized list of font family names and/or 
generic family names.">
            <category-list>
                <category value="visual" />
            </category-list>
            <!-- allowing only generic font families -->
            <literal-list>
                <literal value="serif" />
                <literal value="courier" />
                <literal value="courier new" />
                <literal value="arial" />
                <literal value="lucida console" />
                <literal value="sans-serif" />
                <literal value="cursive" />
                <literal value="verdana" />
                <literal value="fantasy" />
                <literal value="monospace" />
            </literal-list>
        </property>

Original issue reported on code.google.com by kapsler@gmail.com on 3 Aug 2009 at 8:01

GoogleCodeExporter commented 9 years ago

Original comment by arshan.d...@gmail.com on 3 Aug 2009 at 2:24

GoogleCodeExporter commented 9 years ago 
I downloaded the latest jar and still see this issue. Would be nice if it gets 
fixed soon. Otherwise Antisamy is not compatible with CkEditor. Thanks!

Original comment by omsn1...@gmail.com on 10 Jun 2010 at 7:42