search

jkk / formative

Web forms for Clojure and ClojureScript - rendering, parsing, and validating
208 stars 18 forks source link

Preventing XSS with Formative #42

Closed theronic closed 4 years ago

theronic commented 9 years ago

I noticed the formative.util/escape-html function implemented to sanitise incoming HTML. Is there a way to tell Formative to escape incoming strings for certain form definitions?

iku000888 commented 4 years ago

I think the defmethods per field/form type is sufficient to achieve this in application space