jeff377 / owaspantisamy

Automatically exported from code.google.com/p/owaspantisamy
0 stars 0 forks source link

rgbCode regex doesn't allow percents or spaces (antisamy.xml) #68

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
Looking at antisamy.xml, SVN revision 137:

<regexp name="rgbCode"
value="rgb\(([1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5]),([1]?[0-9]{1,2}|2[0-4][0-9]|25[
0-5]),([1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])\)"/>

This allows values like rgb(40,100,200).
It does not allow rgb(40, 100, 200) or rgb(10%,20%,30%). As far as I can
tell, both of these are valid color specifications.
See http://www.w3.org/TR/CSS21/syndata.html#value-def-color

Original issue reported on code.google.com by danr...@gmail.com on 23 Dec 2009 at 8:19

GoogleCodeExporter commented 8 years ago

Original comment by arshan.d...@gmail.com on 8 Mar 2010 at 5:55