search

dart-lang / tools

This repository is home to tooling related Dart packages.
BSD 3-Clause "New" or "Revised" License
32 stars 27 forks source link

Add support for sanitizing/filtering #1103

Open DartBot opened 9 years ago

DartBot commented 9 years ago

Issue by sethladd Originally opened as dart-lang/sdk#16694

I know that the readme talks about sanitizing being still unimplemented.

I made this task so that me and others can follow this particular work (couldn't find anything with the search).

We are using Web UI in our project and sometimes new SafeHtml.unsafe(...) even for user-supplied content which is bad, but we have to in order to support custom user-supplied HTML. Our hopes are that sooner or later we can replace those with code that sanitizes the bad input and makes sure it's clean by leveraging a whitelist approach.

DartBot commented 9 years ago

Comment by sethladd

Was https://github.com/dart-lang/html5lib-now-on-dart.googlecode.com/issues/67

DartBot commented 9 years ago

Comment by kevmoo

Added Pkg-Html5Lib label.

DartBot commented 9 years ago

Comment by kevmoo

Removed Library-Html5lib label.

rspilker commented 7 years ago

We've created a separate library for white-listing tags, attributes and values that uses this library. We are willing to donate this work. Alternatively, we can work together to meet all your needs.