andresriancho owaspantisamy issues

andresriancho / owaspantisamy

Automatically exported from code.google.com/p/owaspantisamy

12 stars 15 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

getErrorMessages() not populated for unsafe inputs and can bypass most implementations.

#142 GoogleCodeExporter closed 9 years ago
2
Filter Bypass using certain characters

#141 GoogleCodeExporter opened 9 years ago
3
CSS RGB values containing percentages throws Exception

#140 GoogleCodeExporter closed 9 years ago
2
CSS RGB values containing percentages throws Exception

#139 GoogleCodeExporter opened 9 years ago
1
<a href="http://www.google.co.in" target="_blank">Click Me</a>

#138 GoogleCodeExporter opened 9 years ago
0
cannot pass inline css property

#137 GoogleCodeExporter opened 9 years ago
3
SAX implementation is significantly slower than DOM for lots of small input documents

#136 GoogleCodeExporter closed 9 years ago
2
A few formatting tags missing from the config files (dfn, kbd, var, abbr, acronym)

#135 GoogleCodeExporter closed 9 years ago
2
Odd regex for headers

#134 GoogleCodeExporter opened 9 years ago
1
Issue of bundling antisamy(xerces) with xalan

#133 GoogleCodeExporter closed 9 years ago
1
Antisamy policy file for css expression

#132 GoogleCodeExporter closed 9 years ago
3
antisamy strips tag with mismatched quotes but does not report error

#131 GoogleCodeExporter opened 9 years ago
1
Diacritics are html encoded by scan / getCleanHTML

#130 GoogleCodeExporter closed 9 years ago
4
Output is not valid HTML/XHTML

#129 GoogleCodeExporter opened 9 years ago
4
Unable to restrict " stYle=x:expre/**/ssion(alert(9)) ns="

#128 GoogleCodeExporter closed 9 years ago
3
java.lang.NoClassDefFoundError: org/cyberneko/html/filters/DefaultFilter

#127 GoogleCodeExporter closed 9 years ago
3
Empty strong tag becomes self-closing tag

#126 GoogleCodeExporter opened 9 years ago
1
Add support for html <map> tag

#125 GoogleCodeExporter opened 9 years ago
0
<style type="text/javascript> allowed

#124 GoogleCodeExporter opened 9 years ago
1
Supplementary chars (surrogate pairs) are broken or stripped

#123 GoogleCodeExporter opened 9 years ago
4
border-radius not supported

#122 GoogleCodeExporter opened 9 years ago
2
international character test fails in AntiSamyTest (AntiSamy Java)

#121 GoogleCodeExporter closed 9 years ago
2
Tags containing null bytes are not validated

#120 GoogleCodeExporter opened 9 years ago
1
Null character check

#119 GoogleCodeExporter closed 9 years ago
2
out of date dependancy on nekohtml (breaks Intelij's parsing of schemas)

#118 GoogleCodeExporter closed 9 years ago
3
SQL injections

#117 GoogleCodeExporter closed 9 years ago
1
AntiSamy validation with SAX parser not closing empty tags

#116 GoogleCodeExporter closed 9 years ago
3
Full Release needed

#115 GoogleCodeExporter closed 9 years ago
2
Apache Commons HTTP-Client 3.1 dependancy when not allowing embedded stylesheets

#114 GoogleCodeExporter closed 9 years ago
2
How to handle </br> tags?

#113 GoogleCodeExporter closed 9 years ago
2
Empty tag becomes self closing

#112 GoogleCodeExporter closed 9 years ago
3
Provide options for "nofollow" on <a href> tags.

#111 GoogleCodeExporter closed 9 years ago
2
Blank space getting inserted in empty tags.

#110 GoogleCodeExporter closed 9 years ago
1
Blank space getting inserted in empty tags.

#109 GoogleCodeExporter closed 9 years ago
3
French Character Encoding Issue

#108 GoogleCodeExporter closed 9 years ago
1
Appending newlines to every line in the clean HTML

#107 GoogleCodeExporter closed 9 years ago
5
incorrect styleScanner.scanInlineStyle error handling

#106 GoogleCodeExporter closed 9 years ago
3
CSS validation does not report CSSParseExceptions as errors

#105 GoogleCodeExporter opened 9 years ago
4
Does antisamy support style attribute of the image tag

#104 GoogleCodeExporter closed 9 years ago
9
style attributes of the image tag

#103 GoogleCodeExporter closed 9 years ago
2
Remove hard dependency on xercesImpl

#102 GoogleCodeExporter closed 9 years ago
4
Whitelist for special characters being untouched

#101 GoogleCodeExporter closed 9 years ago
25
<SCRIPT></SCRIPT><p>a</p> breaks

#100 GoogleCodeExporter closed 9 years ago
1
Html entities encoding should be configurable (via directive ?)

#99 GoogleCodeExporter closed 9 years ago
11
Antisamy confuses nested elements with empty elements and deletes them

#98 GoogleCodeExporter closed 9 years ago
4
"*" - a star in front of css - classes or css - id elements

#97 GoogleCodeExporter opened 9 years ago
4
the scanner put ![CDATA[... into the scan results

#96 GoogleCodeExporter closed 9 years ago
3
java.lang.NoClassDefFoundError when using the antisamy-1.4.1.xml policy file

#95 GoogleCodeExporter closed 9 years ago
4
Directive: Anchors with nofollow in .NET port

#94 GoogleCodeExporter closed 9 years ago
3
Tags with special characters under certain cirmstances don't seem to be rejected.

#93 GoogleCodeExporter closed 9 years ago
4

Previous Next