andytanoko / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java
0 stars 0 forks source link

Strips quotes from font-family? #29

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
Given a style tag containing:

body {
font-family: "Arial Unicode MS" , Arial , sans-serif;
}

It seems to convert it into:

body {
font-family: Arial Unicode MS , Arial , sans-serif;
}

However, I'm not sure whether browsers will interpret the second the same 
as the first.

Original issue reported on code.google.com by dob...@gmail.com on 28 Aug 2009 at 8:43

GoogleCodeExporter commented 8 years ago
Here's a patch that seems to resolve the issue - css string values with a space 
in them 
will be wrapped in double quotes.

A test case is also included.

Original comment by dob...@gmail.com on 28 Aug 2009 at 9:05

Attachments:

GoogleCodeExporter commented 8 years ago
I believe that this issue belongs in the AntiSamy project, not the ESAPI. ESAPI
depends on the AntiSamy project.

Original comment by chrisisbeef on 14 Oct 2009 at 7:36

GoogleCodeExporter commented 8 years ago
Ah sorry I got confused

Original comment by dob...@gmail.com on 14 Oct 2009 at 10:42